From f5d786885721c374cc22a1f1311ca01408a496fd Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Sun, 24 Mar 2013 21:49:12 +0000 Subject: [PATCH] OCSP-stapling enhancement and testing. Server: Honor environment variable as well as running_in_test_harness in permitting bogus staplings Update server tests Add "-ocsp" option to client-ssl. Server side: add verification of stapled status. First cut server-mode ocsp testing. Fix some uninitialized ocsp-related data. Client (new): Verify stapling using only the chain that verified the server cert, not any acceptable chain. Add check for multiple responses in a stapling, which is not handled Refuse verification on expired and revoking staplings. Handle OCSP client refusal on lack of stapling from server. More fixing in client OCSP: use the server cert signing chain to verify the OCSP info. Add transport hosts_require_ocsp option. Log stapling responses. Start on tests for client-side. Testing support: Add CRL generation code and documentation update Initial CA & certificate set for testing. BUGFIX: Once a single OCSP response has been extracted the validation routine return code is no longer about the structure, but the actual returned OCSP status. --- doc/doc-txt/experimental-spec.txt | 11 +- src/src/functions.h | 5 +- src/src/tls-gnu.c | 9 +- src/src/tls-openssl.c | 358 ++++++++++++++---- src/src/transports/smtp.c | 11 +- src/src/transports/smtp.h | 3 + src/src/verify.c | 8 +- test/README | 8 +- test/aux-fixed/exim-ca/README | 51 +++ .../exim-ca/example.com/BLANK/CA.pem | 10 + .../exim-ca/example.com/BLANK/Signer.pem | 11 + .../exim-ca/example.com/BLANK/cert8.db | Bin 0 -> 65536 bytes .../exim-ca/example.com/BLANK/key3.db | Bin 0 -> 16384 bytes .../exim-ca/example.com/BLANK/pwdfile | 1 + .../exim-ca/example.com/BLANK/secmod.db | Bin 0 -> 16384 bytes test/aux-fixed/exim-ca/example.com/CA/CA.pem | 10 + .../aux-fixed/exim-ca/example.com/CA/OCSP.key | 14 + .../aux-fixed/exim-ca/example.com/CA/OCSP.p12 | Bin 0 -> 2210 bytes .../aux-fixed/exim-ca/example.com/CA/OCSP.pem | 11 + .../exim-ca/example.com/CA/Signer.pem | 11 + test/aux-fixed/exim-ca/example.com/CA/ca.conf | 18 + .../aux-fixed/exim-ca/example.com/CA/cert8.db | Bin 0 -> 65536 bytes .../exim-ca/example.com/CA/crl.empty | Bin 0 -> 175 bytes .../exim-ca/example.com/CA/crl.empty.in.txt | 1 + .../exim-ca/example.com/CA/crl.empty.pem | 6 + test/aux-fixed/exim-ca/example.com/CA/crl.v2 | Bin 0 -> 223 bytes .../exim-ca/example.com/CA/crl.v2.in.txt | 3 + .../exim-ca/example.com/CA/crl.v2.pem | 7 + .../exim-ca/example.com/CA/index.revoked.txt | 6 + .../exim-ca/example.com/CA/index.valid.txt | 6 + test/aux-fixed/exim-ca/example.com/CA/key3.db | Bin 0 -> 16384 bytes .../exim-ca/example.com/CA/noise.file | 342 +++++++++++++++++ test/aux-fixed/exim-ca/example.com/CA/pwdfile | 1 + .../exim-ca/example.com/CA/secmod.db | Bin 0 -> 16384 bytes .../expired1.example.com/ca_chain.pem | 47 +++ .../example.com/expired1.example.com/cert8.db | Bin 0 -> 65536 bytes .../expired1.example.com.chain.pem | 29 ++ .../expired1.example.com.key | 15 + .../expired1.example.com.ocsp.dated.resp | Bin 0 -> 725 bytes .../expired1.example.com.ocsp.good.resp | Bin 0 -> 706 bytes .../expired1.example.com.ocsp.req | Bin 0 -> 105 bytes .../expired1.example.com.ocsp.revoked.resp | Bin 0 -> 728 bytes .../expired1.example.com.p12 | Bin 0 -> 2380 bytes .../expired1.example.com.pem | 18 + .../expired1.example.com.unlocked.key | 9 + .../example.com/expired1.example.com/key3.db | Bin 0 -> 16384 bytes .../example.com/expired1.example.com/pwdfile | 1 + .../expired1.example.com/secmod.db | Bin 0 -> 16384 bytes .../expired2.example.com/ca_chain.pem | 47 +++ .../example.com/expired2.example.com/cert8.db | Bin 0 -> 65536 bytes .../expired2.example.com.chain.pem | 29 ++ .../expired2.example.com.key | 15 + .../expired2.example.com.ocsp.dated.resp | Bin 0 -> 726 bytes .../expired2.example.com.ocsp.good.resp | Bin 0 -> 707 bytes .../expired2.example.com.ocsp.req | Bin 0 -> 106 bytes .../expired2.example.com.ocsp.revoked.resp | Bin 0 -> 707 bytes .../expired2.example.com.p12 | Bin 0 -> 2388 bytes .../expired2.example.com.pem | 18 + .../expired2.example.com.unlocked.key | 9 + .../example.com/expired2.example.com/key3.db | Bin 0 -> 16384 bytes .../example.com/expired2.example.com/pwdfile | 1 + .../expired2.example.com/secmod.db | Bin 0 -> 16384 bytes .../revoked1.example.com/ca_chain.pem | 47 +++ .../example.com/revoked1.example.com/cert8.db | Bin 0 -> 65536 bytes .../example.com/revoked1.example.com/key3.db | Bin 0 -> 16384 bytes .../example.com/revoked1.example.com/pwdfile | 1 + .../revoked1.example.com.chain.pem | 29 ++ .../revoked1.example.com.key | 15 + .../revoked1.example.com.ocsp.dated.resp | Bin 0 -> 725 bytes .../revoked1.example.com.ocsp.good.resp | Bin 0 -> 706 bytes .../revoked1.example.com.ocsp.req | Bin 0 -> 105 bytes .../revoked1.example.com.ocsp.revoked.resp | Bin 0 -> 728 bytes .../revoked1.example.com.p12 | Bin 0 -> 2380 bytes .../revoked1.example.com.pem | 18 + .../revoked1.example.com.unlocked.key | 9 + .../revoked1.example.com/secmod.db | Bin 0 -> 16384 bytes .../revoked2.example.com/ca_chain.pem | 47 +++ .../example.com/revoked2.example.com/cert8.db | Bin 0 -> 65536 bytes .../example.com/revoked2.example.com/key3.db | Bin 0 -> 16384 bytes .../example.com/revoked2.example.com/pwdfile | 1 + .../revoked2.example.com.chain.pem | 29 ++ .../revoked2.example.com.key | 15 + .../revoked2.example.com.ocsp.dated.resp | Bin 0 -> 726 bytes .../revoked2.example.com.ocsp.good.resp | Bin 0 -> 707 bytes .../revoked2.example.com.ocsp.req | Bin 0 -> 106 bytes .../revoked2.example.com.ocsp.revoked.resp | Bin 0 -> 707 bytes .../revoked2.example.com.p12 | Bin 0 -> 2388 bytes .../revoked2.example.com.pem | 18 + .../revoked2.example.com.unlocked.key | 9 + .../revoked2.example.com/secmod.db | Bin 0 -> 16384 bytes .../server1.example.com/ca_chain.pem | 47 +++ .../example.com/server1.example.com/cert8.db | Bin 0 -> 65536 bytes .../example.com/server1.example.com/key3.db | Bin 0 -> 16384 bytes .../example.com/server1.example.com/pwdfile | 1 + .../example.com/server1.example.com/secmod.db | Bin 0 -> 16384 bytes .../server1.example.com.chain.pem | 29 ++ .../server1.example.com.key | 15 + .../server1.example.com.ocsp.dated.resp | Bin 0 -> 725 bytes .../server1.example.com.ocsp.good.resp | Bin 0 -> 706 bytes .../server1.example.com.ocsp.req | Bin 0 -> 105 bytes .../server1.example.com.ocsp.revoked.resp | Bin 0 -> 728 bytes .../server1.example.com.p12 | Bin 0 -> 2370 bytes .../server1.example.com.pem | 18 + .../server1.example.com.unlocked.key | 9 + .../server2.example.com/ca_chain.pem | 47 +++ .../example.com/server2.example.com/cert8.db | Bin 0 -> 65536 bytes .../example.com/server2.example.com/key3.db | Bin 0 -> 16384 bytes .../example.com/server2.example.com/pwdfile | 1 + .../example.com/server2.example.com/secmod.db | Bin 0 -> 16384 bytes .../server2.example.com.chain.pem | 29 ++ .../server2.example.com.key | 15 + .../server2.example.com.ocsp.dated.resp | Bin 0 -> 726 bytes .../server2.example.com.ocsp.good.resp | Bin 0 -> 707 bytes .../server2.example.com.ocsp.req | Bin 0 -> 106 bytes .../server2.example.com.ocsp.revoked.resp | Bin 0 -> 707 bytes .../server2.example.com.p12 | Bin 0 -> 2378 bytes .../server2.example.com.pem | 18 + .../server2.example.com.unlocked.key | 9 + .../exim-ca/example.net/BLANK/CA.pem | 10 + .../exim-ca/example.net/BLANK/Signer.pem | 11 + .../exim-ca/example.net/BLANK/cert8.db | Bin 0 -> 65536 bytes .../exim-ca/example.net/BLANK/key3.db | Bin 0 -> 16384 bytes .../exim-ca/example.net/BLANK/pwdfile | 1 + .../exim-ca/example.net/BLANK/secmod.db | Bin 0 -> 16384 bytes test/aux-fixed/exim-ca/example.net/CA/CA.pem | 10 + .../aux-fixed/exim-ca/example.net/CA/OCSP.key | 14 + .../aux-fixed/exim-ca/example.net/CA/OCSP.p12 | Bin 0 -> 2218 bytes .../aux-fixed/exim-ca/example.net/CA/OCSP.pem | 11 + .../exim-ca/example.net/CA/Signer.pem | 11 + test/aux-fixed/exim-ca/example.net/CA/ca.conf | 18 + .../aux-fixed/exim-ca/example.net/CA/cert8.db | Bin 0 -> 65536 bytes .../exim-ca/example.net/CA/crl.empty | Bin 0 -> 175 bytes .../exim-ca/example.net/CA/crl.empty.in.txt | 1 + .../exim-ca/example.net/CA/crl.empty.pem | 6 + test/aux-fixed/exim-ca/example.net/CA/crl.v2 | Bin 0 -> 223 bytes .../exim-ca/example.net/CA/crl.v2.in.txt | 3 + .../exim-ca/example.net/CA/crl.v2.pem | 7 + .../exim-ca/example.net/CA/index.revoked.txt | 6 + .../exim-ca/example.net/CA/index.valid.txt | 6 + test/aux-fixed/exim-ca/example.net/CA/key3.db | Bin 0 -> 16384 bytes .../exim-ca/example.net/CA/noise.file | 342 +++++++++++++++++ test/aux-fixed/exim-ca/example.net/CA/pwdfile | 1 + .../exim-ca/example.net/CA/secmod.db | Bin 0 -> 16384 bytes .../expired1.example.net/ca_chain.pem | 47 +++ .../example.net/expired1.example.net/cert8.db | Bin 0 -> 65536 bytes .../expired1.example.net.chain.pem | 29 ++ .../expired1.example.net.key | 15 + .../expired1.example.net.ocsp.dated.resp | Bin 0 -> 725 bytes .../expired1.example.net.ocsp.good.resp | Bin 0 -> 706 bytes .../expired1.example.net.ocsp.req | Bin 0 -> 105 bytes .../expired1.example.net.ocsp.revoked.resp | Bin 0 -> 728 bytes .../expired1.example.net.p12 | Bin 0 -> 2388 bytes .../expired1.example.net.pem | 18 + .../expired1.example.net.unlocked.key | 9 + .../example.net/expired1.example.net/key3.db | Bin 0 -> 16384 bytes .../example.net/expired1.example.net/pwdfile | 1 + .../expired1.example.net/secmod.db | Bin 0 -> 16384 bytes .../expired2.example.net/ca_chain.pem | 47 +++ .../example.net/expired2.example.net/cert8.db | Bin 0 -> 65536 bytes .../expired2.example.net.chain.pem | 29 ++ .../expired2.example.net.key | 15 + .../expired2.example.net.ocsp.dated.resp | Bin 0 -> 726 bytes .../expired2.example.net.ocsp.good.resp | Bin 0 -> 707 bytes .../expired2.example.net.ocsp.req | Bin 0 -> 106 bytes .../expired2.example.net.ocsp.revoked.resp | Bin 0 -> 707 bytes .../expired2.example.net.p12 | Bin 0 -> 2388 bytes .../expired2.example.net.pem | 18 + .../expired2.example.net.unlocked.key | 9 + .../example.net/expired2.example.net/key3.db | Bin 0 -> 16384 bytes .../example.net/expired2.example.net/pwdfile | 1 + .../expired2.example.net/secmod.db | Bin 0 -> 16384 bytes .../revoked1.example.net/ca_chain.pem | 47 +++ .../example.net/revoked1.example.net/cert8.db | Bin 0 -> 65536 bytes .../example.net/revoked1.example.net/key3.db | Bin 0 -> 16384 bytes .../example.net/revoked1.example.net/pwdfile | 1 + .../revoked1.example.net.chain.pem | 29 ++ .../revoked1.example.net.key | 15 + .../revoked1.example.net.ocsp.dated.resp | Bin 0 -> 725 bytes .../revoked1.example.net.ocsp.good.resp | Bin 0 -> 706 bytes .../revoked1.example.net.ocsp.req | Bin 0 -> 105 bytes .../revoked1.example.net.ocsp.revoked.resp | Bin 0 -> 728 bytes .../revoked1.example.net.p12 | Bin 0 -> 2388 bytes .../revoked1.example.net.pem | 18 + .../revoked1.example.net.unlocked.key | 9 + .../revoked1.example.net/secmod.db | Bin 0 -> 16384 bytes .../revoked2.example.net/ca_chain.pem | 47 +++ .../example.net/revoked2.example.net/cert8.db | Bin 0 -> 65536 bytes .../example.net/revoked2.example.net/key3.db | Bin 0 -> 16384 bytes .../example.net/revoked2.example.net/pwdfile | 1 + .../revoked2.example.net.chain.pem | 29 ++ .../revoked2.example.net.key | 15 + .../revoked2.example.net.ocsp.dated.resp | Bin 0 -> 726 bytes .../revoked2.example.net.ocsp.good.resp | Bin 0 -> 707 bytes .../revoked2.example.net.ocsp.req | Bin 0 -> 106 bytes .../revoked2.example.net.ocsp.revoked.resp | Bin 0 -> 707 bytes .../revoked2.example.net.p12 | Bin 0 -> 2388 bytes .../revoked2.example.net.pem | 18 + .../revoked2.example.net.unlocked.key | 9 + .../revoked2.example.net/secmod.db | Bin 0 -> 16384 bytes .../server1.example.net/ca_chain.pem | 47 +++ .../example.net/server1.example.net/cert8.db | Bin 0 -> 65536 bytes .../example.net/server1.example.net/key3.db | Bin 0 -> 16384 bytes .../example.net/server1.example.net/pwdfile | 1 + .../example.net/server1.example.net/secmod.db | Bin 0 -> 16384 bytes .../server1.example.net.chain.pem | 29 ++ .../server1.example.net.key | 15 + .../server1.example.net.ocsp.dated.resp | Bin 0 -> 725 bytes .../server1.example.net.ocsp.good.resp | Bin 0 -> 706 bytes .../server1.example.net.ocsp.req | Bin 0 -> 105 bytes .../server1.example.net.ocsp.revoked.resp | Bin 0 -> 728 bytes .../server1.example.net.p12 | Bin 0 -> 2378 bytes .../server1.example.net.pem | 18 + .../server1.example.net.unlocked.key | 9 + .../server2.example.net/ca_chain.pem | 47 +++ .../example.net/server2.example.net/cert8.db | Bin 0 -> 65536 bytes .../example.net/server2.example.net/key3.db | Bin 0 -> 16384 bytes .../example.net/server2.example.net/pwdfile | 1 + .../example.net/server2.example.net/secmod.db | Bin 0 -> 16384 bytes .../server2.example.net.chain.pem | 29 ++ .../server2.example.net.key | 15 + .../server2.example.net.ocsp.dated.resp | Bin 0 -> 726 bytes .../server2.example.net.ocsp.good.resp | Bin 0 -> 707 bytes .../server2.example.net.ocsp.req | Bin 0 -> 106 bytes .../server2.example.net.ocsp.revoked.resp | Bin 0 -> 707 bytes .../server2.example.net.p12 | Bin 0 -> 2386 bytes .../server2.example.net.pem | 18 + .../server2.example.net.unlocked.key | 9 + .../exim-ca/example.org/BLANK/CA.pem | 10 + .../exim-ca/example.org/BLANK/Signer.pem | 11 + .../exim-ca/example.org/BLANK/cert8.db | Bin 0 -> 65536 bytes .../exim-ca/example.org/BLANK/key3.db | Bin 0 -> 16384 bytes .../exim-ca/example.org/BLANK/pwdfile | 1 + .../exim-ca/example.org/BLANK/secmod.db | Bin 0 -> 16384 bytes test/aux-fixed/exim-ca/example.org/CA/CA.pem | 10 + .../aux-fixed/exim-ca/example.org/CA/OCSP.key | 14 + .../aux-fixed/exim-ca/example.org/CA/OCSP.p12 | Bin 0 -> 2218 bytes .../aux-fixed/exim-ca/example.org/CA/OCSP.pem | 11 + .../exim-ca/example.org/CA/Signer.pem | 11 + test/aux-fixed/exim-ca/example.org/CA/ca.conf | 18 + .../aux-fixed/exim-ca/example.org/CA/cert8.db | Bin 0 -> 65536 bytes .../exim-ca/example.org/CA/crl.empty | Bin 0 -> 175 bytes .../exim-ca/example.org/CA/crl.empty.in.txt | 1 + .../exim-ca/example.org/CA/crl.empty.pem | 6 + test/aux-fixed/exim-ca/example.org/CA/crl.v2 | Bin 0 -> 223 bytes .../exim-ca/example.org/CA/crl.v2.in.txt | 3 + .../exim-ca/example.org/CA/crl.v2.pem | 7 + .../exim-ca/example.org/CA/index.revoked.txt | 6 + .../exim-ca/example.org/CA/index.valid.txt | 6 + test/aux-fixed/exim-ca/example.org/CA/key3.db | Bin 0 -> 16384 bytes .../exim-ca/example.org/CA/noise.file | 342 +++++++++++++++++ test/aux-fixed/exim-ca/example.org/CA/pwdfile | 1 + .../exim-ca/example.org/CA/secmod.db | Bin 0 -> 16384 bytes .../expired1.example.org/ca_chain.pem | 47 +++ .../example.org/expired1.example.org/cert8.db | Bin 0 -> 65536 bytes .../expired1.example.org.chain.pem | 29 ++ .../expired1.example.org.key | 15 + .../expired1.example.org.ocsp.dated.resp | Bin 0 -> 725 bytes .../expired1.example.org.ocsp.good.resp | Bin 0 -> 706 bytes .../expired1.example.org.ocsp.req | Bin 0 -> 105 bytes .../expired1.example.org.ocsp.revoked.resp | Bin 0 -> 728 bytes .../expired1.example.org.p12 | Bin 0 -> 2388 bytes .../expired1.example.org.pem | 18 + .../expired1.example.org.unlocked.key | 9 + .../example.org/expired1.example.org/key3.db | Bin 0 -> 16384 bytes .../example.org/expired1.example.org/pwdfile | 1 + .../expired1.example.org/secmod.db | Bin 0 -> 16384 bytes .../expired2.example.org/ca_chain.pem | 47 +++ .../example.org/expired2.example.org/cert8.db | Bin 0 -> 65536 bytes .../expired2.example.org.chain.pem | 29 ++ .../expired2.example.org.key | 15 + .../expired2.example.org.ocsp.dated.resp | Bin 0 -> 726 bytes .../expired2.example.org.ocsp.good.resp | Bin 0 -> 707 bytes .../expired2.example.org.ocsp.req | Bin 0 -> 106 bytes .../expired2.example.org.ocsp.revoked.resp | Bin 0 -> 707 bytes .../expired2.example.org.p12 | Bin 0 -> 2388 bytes .../expired2.example.org.pem | 18 + .../expired2.example.org.unlocked.key | 9 + .../example.org/expired2.example.org/key3.db | Bin 0 -> 16384 bytes .../example.org/expired2.example.org/pwdfile | 1 + .../expired2.example.org/secmod.db | Bin 0 -> 16384 bytes .../revoked1.example.org/ca_chain.pem | 47 +++ .../example.org/revoked1.example.org/cert8.db | Bin 0 -> 65536 bytes .../example.org/revoked1.example.org/key3.db | Bin 0 -> 16384 bytes .../example.org/revoked1.example.org/pwdfile | 1 + .../revoked1.example.org.chain.pem | 29 ++ .../revoked1.example.org.key | 15 + .../revoked1.example.org.ocsp.dated.resp | Bin 0 -> 725 bytes .../revoked1.example.org.ocsp.good.resp | Bin 0 -> 706 bytes .../revoked1.example.org.ocsp.req | Bin 0 -> 105 bytes .../revoked1.example.org.ocsp.revoked.resp | Bin 0 -> 728 bytes .../revoked1.example.org.p12 | Bin 0 -> 2380 bytes .../revoked1.example.org.pem | 18 + .../revoked1.example.org.unlocked.key | 9 + .../revoked1.example.org/secmod.db | Bin 0 -> 16384 bytes .../revoked2.example.org/ca_chain.pem | 47 +++ .../example.org/revoked2.example.org/cert8.db | Bin 0 -> 65536 bytes .../example.org/revoked2.example.org/key3.db | Bin 0 -> 16384 bytes .../example.org/revoked2.example.org/pwdfile | 1 + .../revoked2.example.org.chain.pem | 29 ++ .../revoked2.example.org.key | 15 + .../revoked2.example.org.ocsp.dated.resp | Bin 0 -> 726 bytes .../revoked2.example.org.ocsp.good.resp | Bin 0 -> 707 bytes .../revoked2.example.org.ocsp.req | Bin 0 -> 106 bytes .../revoked2.example.org.ocsp.revoked.resp | Bin 0 -> 707 bytes .../revoked2.example.org.p12 | Bin 0 -> 2388 bytes .../revoked2.example.org.pem | 18 + .../revoked2.example.org.unlocked.key | 9 + .../revoked2.example.org/secmod.db | Bin 0 -> 16384 bytes .../server1.example.org/ca_chain.pem | 47 +++ .../example.org/server1.example.org/cert8.db | Bin 0 -> 65536 bytes .../example.org/server1.example.org/key3.db | Bin 0 -> 16384 bytes .../example.org/server1.example.org/pwdfile | 1 + .../example.org/server1.example.org/secmod.db | Bin 0 -> 16384 bytes .../server1.example.org.chain.pem | 29 ++ .../server1.example.org.key | 15 + .../server1.example.org.ocsp.dated.resp | Bin 0 -> 725 bytes .../server1.example.org.ocsp.good.resp | Bin 0 -> 706 bytes .../server1.example.org.ocsp.req | Bin 0 -> 105 bytes .../server1.example.org.ocsp.revoked.resp | Bin 0 -> 728 bytes .../server1.example.org.p12 | Bin 0 -> 2378 bytes .../server1.example.org.pem | 18 + .../server1.example.org.unlocked.key | 9 + .../server2.example.org/ca_chain.pem | 47 +++ .../example.org/server2.example.org/cert8.db | Bin 0 -> 65536 bytes .../example.org/server2.example.org/key3.db | Bin 0 -> 16384 bytes .../example.org/server2.example.org/pwdfile | 1 + .../example.org/server2.example.org/secmod.db | Bin 0 -> 16384 bytes .../server2.example.org.chain.pem | 29 ++ .../server2.example.org.key | 15 + .../server2.example.org.ocsp.dated.resp | Bin 0 -> 726 bytes .../server2.example.org.ocsp.good.resp | Bin 0 -> 707 bytes .../server2.example.org.ocsp.req | Bin 0 -> 106 bytes .../server2.example.org.ocsp.revoked.resp | Bin 0 -> 707 bytes .../server2.example.org.p12 | Bin 0 -> 2386 bytes .../server2.example.org.pem | 18 + .../server2.example.org.unlocked.key | 9 + test/aux-fixed/exim-ca/genall | 101 +++++ test/aux-fixed/ocsp_file.der | Bin 0 -> 1367 bytes test/confs/5600 | 66 ++++ test/confs/5601 | 121 ++++++ test/log/5600 | 6 + test/log/5601 | 41 ++ test/msglog/2145.10HmaX-0005vi-00 | 1 + test/scripts/5600-OCSP-OpenSSL/5600 | 80 ++++ test/scripts/5600-OCSP-OpenSSL/5601 | 65 ++++ test/scripts/5600-OCSP-OpenSSL/REQUIRES | 3 + test/src/client.c | 109 +++++- test/stderr/5600 | 2 + test/stderr/5601 | 2 + test/stdout/5600 | 142 +++++++ test/trusted_configs | 1 + 351 files changed, 4631 insertions(+), 89 deletions(-) create mode 100644 test/aux-fixed/exim-ca/README create mode 100644 test/aux-fixed/exim-ca/example.com/BLANK/CA.pem create mode 100644 test/aux-fixed/exim-ca/example.com/BLANK/Signer.pem create mode 100644 test/aux-fixed/exim-ca/example.com/BLANK/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.com/BLANK/key3.db create mode 100644 test/aux-fixed/exim-ca/example.com/BLANK/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.com/BLANK/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.com/CA/CA.pem create mode 100644 test/aux-fixed/exim-ca/example.com/CA/OCSP.key create mode 100644 test/aux-fixed/exim-ca/example.com/CA/OCSP.p12 create mode 100644 test/aux-fixed/exim-ca/example.com/CA/OCSP.pem create mode 100644 test/aux-fixed/exim-ca/example.com/CA/Signer.pem create mode 100644 test/aux-fixed/exim-ca/example.com/CA/ca.conf create mode 100644 test/aux-fixed/exim-ca/example.com/CA/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.com/CA/crl.empty create mode 100644 test/aux-fixed/exim-ca/example.com/CA/crl.empty.in.txt create mode 100644 test/aux-fixed/exim-ca/example.com/CA/crl.empty.pem create mode 100644 test/aux-fixed/exim-ca/example.com/CA/crl.v2 create mode 100644 test/aux-fixed/exim-ca/example.com/CA/crl.v2.in.txt create mode 100644 test/aux-fixed/exim-ca/example.com/CA/crl.v2.pem create mode 100644 test/aux-fixed/exim-ca/example.com/CA/index.revoked.txt create mode 100644 test/aux-fixed/exim-ca/example.com/CA/index.valid.txt create mode 100644 test/aux-fixed/exim-ca/example.com/CA/key3.db create mode 100644 test/aux-fixed/exim-ca/example.com/CA/noise.file create mode 100644 test/aux-fixed/exim-ca/example.com/CA/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.com/CA/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.key create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.p12 create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.pem create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/key3.db create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.com/expired1.example.com/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.key create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.p12 create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.pem create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/key3.db create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.com/expired2.example.com/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/key3.db create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.key create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.p12 create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.pem create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.com/revoked1.example.com/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/key3.db create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.key create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.p12 create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.pem create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.com/revoked2.example.com/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/key3.db create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.key create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.p12 create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.pem create mode 100644 test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/key3.db create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.key create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.p12 create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.pem create mode 100644 test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.net/BLANK/CA.pem create mode 100644 test/aux-fixed/exim-ca/example.net/BLANK/Signer.pem create mode 100644 test/aux-fixed/exim-ca/example.net/BLANK/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.net/BLANK/key3.db create mode 100644 test/aux-fixed/exim-ca/example.net/BLANK/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.net/BLANK/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.net/CA/CA.pem create mode 100644 test/aux-fixed/exim-ca/example.net/CA/OCSP.key create mode 100644 test/aux-fixed/exim-ca/example.net/CA/OCSP.p12 create mode 100644 test/aux-fixed/exim-ca/example.net/CA/OCSP.pem create mode 100644 test/aux-fixed/exim-ca/example.net/CA/Signer.pem create mode 100644 test/aux-fixed/exim-ca/example.net/CA/ca.conf create mode 100644 test/aux-fixed/exim-ca/example.net/CA/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.net/CA/crl.empty create mode 100644 test/aux-fixed/exim-ca/example.net/CA/crl.empty.in.txt create mode 100644 test/aux-fixed/exim-ca/example.net/CA/crl.empty.pem create mode 100644 test/aux-fixed/exim-ca/example.net/CA/crl.v2 create mode 100644 test/aux-fixed/exim-ca/example.net/CA/crl.v2.in.txt create mode 100644 test/aux-fixed/exim-ca/example.net/CA/crl.v2.pem create mode 100644 test/aux-fixed/exim-ca/example.net/CA/index.revoked.txt create mode 100644 test/aux-fixed/exim-ca/example.net/CA/index.valid.txt create mode 100644 test/aux-fixed/exim-ca/example.net/CA/key3.db create mode 100644 test/aux-fixed/exim-ca/example.net/CA/noise.file create mode 100644 test/aux-fixed/exim-ca/example.net/CA/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.net/CA/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.key create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.p12 create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.pem create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/key3.db create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.net/expired1.example.net/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.key create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.p12 create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.pem create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/key3.db create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.net/expired2.example.net/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/key3.db create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.key create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.p12 create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.pem create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.net/revoked1.example.net/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/key3.db create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.key create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.p12 create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.pem create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.net/revoked2.example.net/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/key3.db create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.key create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.p12 create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.pem create mode 100644 test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/key3.db create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.key create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.p12 create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.pem create mode 100644 test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.org/BLANK/CA.pem create mode 100644 test/aux-fixed/exim-ca/example.org/BLANK/Signer.pem create mode 100644 test/aux-fixed/exim-ca/example.org/BLANK/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.org/BLANK/key3.db create mode 100644 test/aux-fixed/exim-ca/example.org/BLANK/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.org/BLANK/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.org/CA/CA.pem create mode 100644 test/aux-fixed/exim-ca/example.org/CA/OCSP.key create mode 100644 test/aux-fixed/exim-ca/example.org/CA/OCSP.p12 create mode 100644 test/aux-fixed/exim-ca/example.org/CA/OCSP.pem create mode 100644 test/aux-fixed/exim-ca/example.org/CA/Signer.pem create mode 100644 test/aux-fixed/exim-ca/example.org/CA/ca.conf create mode 100644 test/aux-fixed/exim-ca/example.org/CA/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.org/CA/crl.empty create mode 100644 test/aux-fixed/exim-ca/example.org/CA/crl.empty.in.txt create mode 100644 test/aux-fixed/exim-ca/example.org/CA/crl.empty.pem create mode 100644 test/aux-fixed/exim-ca/example.org/CA/crl.v2 create mode 100644 test/aux-fixed/exim-ca/example.org/CA/crl.v2.in.txt create mode 100644 test/aux-fixed/exim-ca/example.org/CA/crl.v2.pem create mode 100644 test/aux-fixed/exim-ca/example.org/CA/index.revoked.txt create mode 100644 test/aux-fixed/exim-ca/example.org/CA/index.valid.txt create mode 100644 test/aux-fixed/exim-ca/example.org/CA/key3.db create mode 100644 test/aux-fixed/exim-ca/example.org/CA/noise.file create mode 100644 test/aux-fixed/exim-ca/example.org/CA/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.org/CA/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.key create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.p12 create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.pem create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/key3.db create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.org/expired1.example.org/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.key create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.p12 create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.pem create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/key3.db create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.org/expired2.example.org/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/key3.db create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.key create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.p12 create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.pem create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.org/revoked1.example.org/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/key3.db create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.key create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.p12 create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.pem create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.org/revoked2.example.org/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/key3.db create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.key create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.p12 create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.pem create mode 100644 test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.unlocked.key create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/ca_chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/cert8.db create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/key3.db create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/pwdfile create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/secmod.db create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.chain.pem create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.key create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.ocsp.dated.resp create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.ocsp.good.resp create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.ocsp.req create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.ocsp.revoked.resp create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.p12 create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.pem create mode 100644 test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.unlocked.key create mode 100755 test/aux-fixed/exim-ca/genall create mode 100644 test/aux-fixed/ocsp_file.der create mode 100644 test/confs/5600 create mode 100644 test/confs/5601 create mode 100644 test/log/5600 create mode 100644 test/log/5601 create mode 100644 test/msglog/2145.10HmaX-0005vi-00 create mode 100644 test/scripts/5600-OCSP-OpenSSL/5600 create mode 100644 test/scripts/5600-OCSP-OpenSSL/5601 create mode 100644 test/scripts/5600-OCSP-OpenSSL/REQUIRES create mode 100644 test/stderr/5600 create mode 100644 test/stderr/5601 create mode 100644 test/stdout/5600 create mode 100644 test/trusted_configs diff --git a/doc/doc-txt/experimental-spec.txt b/doc/doc-txt/experimental-spec.txt index 8d1ebef13..385f0526e 100644 --- a/doc/doc-txt/experimental-spec.txt +++ b/doc/doc-txt/experimental-spec.txt @@ -69,7 +69,7 @@ starts retrying to fetch an OCSP proof some time before its current proof expires. The downside is that it requires server support. If Exim is built with EXPERIMENTAL_OCSP and it was built with OpenSSL, -then it gains one new option: "tls_ocsp_file". +then it gains a new global option: "tls_ocsp_file". The file specified therein is expected to be in DER format, and contain an OCSP proof. Exim will serve it as part of the TLS handshake. This @@ -86,10 +86,15 @@ next connection. Exim will check for a valid next update timestamp in the OCSP proof; if not present, or if the proof has expired, it will be ignored. +Also, given EXPERIMENTAL_OCSP and OpenSSL, the smtp transport gains +a "hosts_require_ocsp" option; a host-list for which an OCSP Stapling +is requested and required for the connection to proceed. The host(s) +should also be in "hosts_require_tls", and "tls_verify_certificates" +configured for the transport. + At this point in time, we're gathering feedback on use, to determine if it's worth adding complexity to the Exim daemon to periodically re-fetch -OCSP files and somehow handling multiple files. There is no client support -for OCSP in Exim, this is feature expected to be used by mail clients. +OCSP files and somehow handling multiple files. diff --git a/src/src/functions.h b/src/src/functions.h index 604dd4a6a..20fc9a0b5 100644 --- a/src/src/functions.h +++ b/src/src/functions.h @@ -25,8 +25,11 @@ extern const char * std_dh_prime_default(void); extern const char * std_dh_prime_named(const uschar *); -extern int tls_client_start(int, host_item *, address_item *, uschar *, +extern int tls_client_start(int, host_item *, address_item *, uschar *, uschar *, uschar *, uschar *, uschar *, uschar *, +# ifdef EXPERIMENTAL_OCSP + uschar *, +# endif int, int); extern void tls_close(BOOL, BOOL); extern int tls_feof(void); diff --git a/src/src/tls-gnu.c b/src/src/tls-gnu.c index 239985767..c357ba4e0 100644 --- a/src/src/tls-gnu.c +++ b/src/src/tls-gnu.c @@ -1547,7 +1547,6 @@ Arguments: fd the fd of the connection host connected host (for messages) addr the first address (not used) - dhparam DH parameter file (ignored, we're a client) certificate certificate file privatekey private key file sni TLS SNI to send to remote host @@ -1563,10 +1562,14 @@ Returns: OK/DEFER/FAIL (because using common functions), int tls_client_start(int fd, host_item *host, - address_item *addr ARG_UNUSED, uschar *dhparam ARG_UNUSED, + address_item *addr ARG_UNUSED, uschar *certificate, uschar *privatekey, uschar *sni, uschar *verify_certs, uschar *verify_crl, - uschar *require_ciphers, int dh_min_bits, int timeout) + uschar *require_ciphers, +#ifdef EXPERIMENTAL_OCSP + uschar *require_ocsp ARG_UNUSED, +#endif + int dh_min_bits, int timeout) { int rc; const char *error; diff --git a/src/src/tls-openssl.c b/src/src/tls-openssl.c index 42afd3949..93ee07967 100644 --- a/src/src/tls-openssl.c +++ b/src/src/tls-openssl.c @@ -5,6 +5,8 @@ /* Copyright (c) University of Cambridge 1995 - 2012 */ /* See the file NOTICE for conditions of use and distribution. */ +/* Portions Copyright (c) The OpenSSL Project 1999 */ + /* This module provides the TLS (aka SSL) support for Exim using the OpenSSL library. It is #included into the tls.c file when that library is used. The code herein is based on a patch that was originally contributed by Steve @@ -80,16 +82,24 @@ static int ssl_session_timeout = 200; static BOOL client_verify_optional = FALSE; static BOOL server_verify_optional = FALSE; -static BOOL reexpand_tls_files_for_sni = FALSE; +static BOOL reexpand_tls_files_for_sni = FALSE; typedef struct tls_ext_ctx_cb { uschar *certificate; uschar *privatekey; #ifdef EXPERIMENTAL_OCSP - uschar *ocsp_file; - uschar *ocsp_file_expanded; - OCSP_RESPONSE *ocsp_response; + BOOL is_server; + union { + struct { + uschar *file; + uschar *file_expanded; + OCSP_RESPONSE *response; + } server; + struct { + X509_STORE *verify_store; + } client; + } u_ocsp; #endif uschar *dhparam; /* these are cached from first expand */ @@ -112,7 +122,7 @@ setup_certs(SSL_CTX *sctx, uschar *certs, uschar *crl, host_item *host, BOOL opt static int tls_servername_cb(SSL *s, int *ad ARG_UNUSED, void *arg); #endif #ifdef EXPERIMENTAL_OCSP -static int tls_stapling_cb(SSL *s, void *arg); +static int tls_server_stapling_cb(SSL *s, void *arg); #endif @@ -196,6 +206,29 @@ return rsa_key; +/* Extreme debug +#if defined(EXPERIMENTAL_OCSP) +void +x509_store_dump_cert_s_names(X509_STORE * store) +{ +STACK_OF(X509_OBJECT) * roots= store->objs; +int i; +static uschar name[256]; + +for(i= 0; itype == X509_LU_X509) + { + X509 * current_cert= tmp_obj->data.x509; + X509_NAME_oneline(X509_get_subject_name(current_cert), CS name, sizeof(name)); + debug_printf(" %s\n", name); + } + } +} +#endif +*/ + /************************************************* * Callback for verification * @@ -227,25 +260,9 @@ Returns: 1 if verified, 0 if not */ static int -verify_callback(int state, X509_STORE_CTX *x509ctx, BOOL client) +verify_callback(int state, X509_STORE_CTX *x509ctx, tls_support *tlsp, BOOL *calledp, BOOL *optionalp) { static uschar txt[256]; -tls_support * tlsp; -BOOL * calledp; -BOOL * optionalp; - -if (client) - { - tlsp= &tls_out; - calledp= &client_verify_callback_called; - optionalp= &client_verify_optional; - } -else - { - tlsp= &tls_in; - calledp= &server_verify_callback_called; - optionalp= &server_verify_optional; - } X509_NAME_oneline(X509_get_subject_name(x509ctx->current_cert), CS txt, sizeof(txt)); @@ -268,6 +285,17 @@ if (x509ctx->error_depth != 0) { DEBUG(D_tls) debug_printf("SSL verify ok: depth=%d cert=%s\n", x509ctx->error_depth, txt); +#ifdef EXPERIMENTAL_OCSP + if (tlsp == &tls_out && client_static_cbinfo->u_ocsp.client.verify_store) + { /* client, wanting stapling */ + /* Add the server cert's signing chain as the one + for the verification of the OCSP stapled information. */ + + if (!X509_STORE_add_cert(client_static_cbinfo->u_ocsp.client.verify_store, + x509ctx->current_cert)) + ERR_clear_error(); + } +#endif } else { @@ -276,6 +304,10 @@ else tlsp->peerdn = txt; } +/*XXX JGH: this looks bogus - we set "verified" first time through, which +will be for the root CS cert (calls work down the chain). Why should it +not be on the last call, where we're setting peerdn? +*/ if (!*calledp) tlsp->certificate_verified = TRUE; *calledp = TRUE; @@ -285,13 +317,13 @@ return 1; /* accept */ static int verify_callback_client(int state, X509_STORE_CTX *x509ctx) { -return verify_callback(state, x509ctx, TRUE); +return verify_callback(state, x509ctx, &tls_out, &client_verify_callback_called, &client_verify_optional); } static int verify_callback_server(int state, X509_STORE_CTX *x509ctx) { -return verify_callback(state, x509ctx, FALSE); +return verify_callback(state, x509ctx, &tls_in, &server_verify_callback_called, &server_verify_optional); } @@ -418,7 +450,7 @@ return TRUE; * Load OCSP information into state * *************************************************/ -/* Called to load the OCSP response from the given file into memory, once +/* Called to load the server OCSP response from the given file into memory, once caller has determined this is needed. Checks validity. Debugs a message if invalid. @@ -432,9 +464,7 @@ Arguments: */ static void -ocsp_load_response(SSL_CTX *sctx, - tls_ext_ctx_cb *cbinfo, - const uschar *expanded) +ocsp_load_response(SSL_CTX *sctx, tls_ext_ctx_cb *cbinfo, const uschar *expanded) { BIO *bio; OCSP_RESPONSE *resp; @@ -445,18 +475,18 @@ X509_STORE *store; unsigned long verify_flags; int status, reason, i; -cbinfo->ocsp_file_expanded = string_copy(expanded); -if (cbinfo->ocsp_response) +cbinfo->u_ocsp.server.file_expanded = string_copy(expanded); +if (cbinfo->u_ocsp.server.response) { - OCSP_RESPONSE_free(cbinfo->ocsp_response); - cbinfo->ocsp_response = NULL; + OCSP_RESPONSE_free(cbinfo->u_ocsp.server.response); + cbinfo->u_ocsp.server.response = NULL; } -bio = BIO_new_file(CS cbinfo->ocsp_file_expanded, "rb"); +bio = BIO_new_file(CS cbinfo->u_ocsp.server.file_expanded, "rb"); if (!bio) { DEBUG(D_tls) debug_printf("Failed to open OCSP response file \"%s\"\n", - cbinfo->ocsp_file_expanded); + cbinfo->u_ocsp.server.file_expanded); return; } @@ -473,7 +503,7 @@ if (status != OCSP_RESPONSE_STATUS_SUCCESSFUL) { DEBUG(D_tls) debug_printf("OCSP response not valid: %s (%d)\n", OCSP_response_status_str(status), status); - return; + goto bad; } basic_response = OCSP_response_get1_basic(resp); @@ -481,7 +511,7 @@ if (!basic_response) { DEBUG(D_tls) debug_printf("OCSP response parse error: unable to extract basic response.\n"); - return; + goto bad; } store = SSL_CTX_get_cert_store(sctx); @@ -497,8 +527,8 @@ if (i <= 0) DEBUG(D_tls) { ERR_error_string(ERR_get_error(), ssl_errstring); debug_printf("OCSP response verify failure: %s\n", US ssl_errstring); - } - return; + } + goto bad; } /* Here's the simplifying assumption: there's only one response, for the @@ -513,27 +543,43 @@ if (!single_response) { DEBUG(D_tls) debug_printf("Unable to get first response from OCSP basic response.\n"); - return; + goto bad; } status = OCSP_single_get0_status(single_response, &reason, &rev, &thisupd, &nextupd); -/* how does this status differ from the one above? */ -if (status != OCSP_RESPONSE_STATUS_SUCCESSFUL) +if (status != V_OCSP_CERTSTATUS_GOOD) { - DEBUG(D_tls) debug_printf("OCSP response not valid (take 2): %s (%d)\n", - OCSP_response_status_str(status), status); - return; + DEBUG(D_tls) debug_printf("OCSP response bad cert status: %s (%d) %s (%d)\n", + OCSP_cert_status_str(status), status, + OCSP_crl_reason_str(reason), reason); + goto bad; } if (!OCSP_check_validity(thisupd, nextupd, EXIM_OCSP_SKEW_SECONDS, EXIM_OCSP_MAX_AGE)) { DEBUG(D_tls) debug_printf("OCSP status invalid times.\n"); - return; + goto bad; } -cbinfo->ocsp_response = resp; +supply_response: +cbinfo->u_ocsp.server.response = resp; +return; + +bad: +if (running_in_test_harness) + { + extern char ** environ; + uschar ** p; + for (p = USS environ; *p != NULL; p++) + if (Ustrncmp(*p, "EXIM_TESTHARNESS_DISABLE_OCSPVALIDITYCHECK", 42) == 0) + { + DEBUG(D_tls) debug_printf("Supplying known bad OCSP response\n"); + goto supply_response; + } + } +return; } -#endif +#endif /*EXPERIMENTAL_OCSP*/ @@ -542,7 +588,7 @@ cbinfo->ocsp_response = resp; * Expand key and cert file specs * *************************************************/ -/* Called once during tls_init and possibly againt during TLS setup, for a +/* Called once during tls_init and possibly again during TLS setup, for a new context, if Server Name Indication was used and tls_sni was seen in the certificate string. @@ -596,16 +642,16 @@ if (expanded != NULL && *expanded != 0) } #ifdef EXPERIMENTAL_OCSP -if (cbinfo->ocsp_file != NULL) +if (cbinfo->is_server && cbinfo->u_ocsp.server.file != NULL) { - if (!expand_check(cbinfo->ocsp_file, US"tls_ocsp_file", &expanded)) + if (!expand_check(cbinfo->u_ocsp.server.file, US"tls_ocsp_file", &expanded)) return DEFER; if (expanded != NULL && *expanded != 0) { DEBUG(D_tls) debug_printf("tls_ocsp_file %s\n", expanded); - if (cbinfo->ocsp_file_expanded && - (Ustrcmp(expanded, cbinfo->ocsp_file_expanded) == 0)) + if (cbinfo->u_ocsp.server.file_expanded && + (Ustrcmp(expanded, cbinfo->u_ocsp.server.file_expanded) == 0)) { DEBUG(D_tls) debug_printf("tls_ocsp_file value unchanged, using existing values.\n"); @@ -686,9 +732,9 @@ SSL_CTX_set_tlsext_servername_arg(server_sni, cbinfo); if (cbinfo->server_cipher_list) SSL_CTX_set_cipher_list(server_sni, CS cbinfo->server_cipher_list); #ifdef EXPERIMENTAL_OCSP -if (cbinfo->ocsp_file) +if (cbinfo->u_ocsp.server.file) { - SSL_CTX_set_tlsext_status_cb(server_sni, tls_stapling_cb); + SSL_CTX_set_tlsext_status_cb(server_sni, tls_server_stapling_cb); SSL_CTX_set_tlsext_status_arg(server_sni, cbinfo); } #endif @@ -715,6 +761,7 @@ return SSL_TLSEXT_ERR_OK; #ifdef EXPERIMENTAL_OCSP + /************************************************* * Callback to handle OCSP Stapling * *************************************************/ @@ -728,19 +775,24 @@ project. */ static int -tls_stapling_cb(SSL *s, void *arg) +tls_server_stapling_cb(SSL *s, void *arg) { const tls_ext_ctx_cb *cbinfo = (tls_ext_ctx_cb *) arg; uschar *response_der; int response_der_len; -DEBUG(D_tls) debug_printf("Received TLS status request (OCSP stapling); %s response.\n", - cbinfo->ocsp_response ? "have" : "lack"); -if (!cbinfo->ocsp_response) +if (log_extra_selector & LX_tls_cipher) + log_write(0, LOG_MAIN, "[%s] Recieved OCSP stapling req;%s responding", + sender_host_address, cbinfo->u_ocsp.server.response ? "":" not"); +else + DEBUG(D_tls) debug_printf("Received TLS status request (OCSP stapling); %s response.", + cbinfo->u_ocsp.server.response ? "have" : "lack"); + +if (!cbinfo->u_ocsp.server.response) return SSL_TLSEXT_ERR_NOACK; response_der = NULL; -response_der_len = i2d_OCSP_RESPONSE(cbinfo->ocsp_response, &response_der); +response_der_len = i2d_OCSP_RESPONSE(cbinfo->u_ocsp.server.response, &response_der); if (response_der_len <= 0) return SSL_TLSEXT_ERR_NOACK; @@ -748,8 +800,133 @@ SSL_set_tlsext_status_ocsp_resp(server_ssl, response_der, response_der_len); return SSL_TLSEXT_ERR_OK; } -#endif /* EXPERIMENTAL_OCSP */ +static void +time_print(BIO * bp, const char * str, ASN1_GENERALIZEDTIME * time) +{ +BIO_printf(bp, "\t%s: ", str); +ASN1_GENERALIZEDTIME_print(bp, time); +BIO_puts(bp, "\n"); +} + +static int +tls_client_stapling_cb(SSL *s, void *arg) +{ +tls_ext_ctx_cb * cbinfo = arg; +const unsigned char * p; +int len; +OCSP_RESPONSE * rsp; +OCSP_BASICRESP * bs; +int i; + +DEBUG(D_tls) debug_printf("Received TLS status response (OCSP stapling):"); +len = SSL_get_tlsext_status_ocsp_resp(s, &p); +if(!p) + { + if (log_extra_selector & LX_tls_cipher) + log_write(0, LOG_MAIN, "Received TLS status response, null content"); + else + DEBUG(D_tls) debug_printf(" null\n"); + return 0; /* This is the fail case for require-ocsp; none from server */ + } +if(!(rsp = d2i_OCSP_RESPONSE(NULL, &p, len))) + { + if (log_extra_selector & LX_tls_cipher) + log_write(0, LOG_MAIN, "Received TLS status response, parse error"); + else + DEBUG(D_tls) debug_printf(" parse error\n"); + return 0; + } + +if(!(bs = OCSP_response_get1_basic(rsp))) + { + if (log_extra_selector & LX_tls_cipher) + log_write(0, LOG_MAIN, "Received TLS status response, error parsing response"); + else + DEBUG(D_tls) debug_printf(" error parsing response\n"); + OCSP_RESPONSE_free(rsp); + return 0; + } + +/* We'd check the nonce here if we'd put one in the request. */ +/* However that would defeat cacheability on the server so we don't. */ + + +/* This section of code reworked from OpenSSL apps source; + The OpenSSL Project retains copyright: + Copyright (c) 1999 The OpenSSL Project. All rights reserved. +*/ + { + BIO * bp = NULL; + OCSP_CERTID *id; + int status, reason; + ASN1_GENERALIZEDTIME *rev, *thisupd, *nextupd; + + DEBUG(D_tls) bp = BIO_new_fp(stderr, BIO_NOCLOSE); + + /*OCSP_RESPONSE_print(bp, rsp, 0); extreme debug: stapling content */ + + /* Use the chain that verified the server cert to verify the stapled info */ + /* DEBUG(D_tls) x509_store_dump_cert_s_names(cbinfo->u_ocsp.client.verify_store); */ + + if ((i = OCSP_basic_verify(bs, NULL, cbinfo->u_ocsp.client.verify_store, 0)) <= 0) + { + BIO_printf(bp, "OCSP response verify failure\n"); + ERR_print_errors(bp); + i = 0; + goto out; + } + + BIO_printf(bp, "OCSP response well-formed and signed OK\n"); + + { + STACK_OF(OCSP_SINGLERESP) * sresp = bs->tbsResponseData->responses; + OCSP_SINGLERESP * single; + + if (sk_OCSP_SINGLERESP_num(sresp) != 1) + { + log_write(0, LOG_MAIN, "OCSP stapling with multiple responses not handled"); + goto out; + } + single = OCSP_resp_get0(bs, 0); + status = OCSP_single_get0_status(single, &reason, &rev, &thisupd, &nextupd); + } + + i = 0; + DEBUG(D_tls) time_print(bp, "This OCSP Update", thisupd); + DEBUG(D_tls) if(nextupd) time_print(bp, "Next OCSP Update", nextupd); + if (!OCSP_check_validity(thisupd, nextupd, EXIM_OCSP_SKEW_SECONDS, EXIM_OCSP_MAX_AGE)) + { + DEBUG(D_tls) ERR_print_errors(bp); + log_write(0, LOG_MAIN, "Server OSCP dates invalid"); + goto out; + } + + DEBUG(D_tls) BIO_printf(bp, "Certificate status: %s\n", OCSP_cert_status_str(status)); + switch(status) + { + case V_OCSP_CERTSTATUS_GOOD: + i = 1; + break; + case V_OCSP_CERTSTATUS_REVOKED: + log_write(0, LOG_MAIN, "Server certificate revoked%s%s", + reason != -1 ? "; reason: " : "", reason != -1 ? OCSP_crl_reason_str(reason) : ""); + DEBUG(D_tls) time_print(bp, "Revocation Time", rev); + i = 0; + break; + default: + log_write(0, LOG_MAIN, "Server certificate status unknown, in OCSP stapling"); + i = 0; + break; + } + out: + BIO_free(bp); + } + +OCSP_RESPONSE_free(rsp); +return i; +} +#endif /*EXPERIMENTAL_OCSP*/ @@ -765,6 +942,7 @@ Arguments: dhparam DH parameter file certificate certificate file privatekey private key + ocsp_file file of stapling info (server); flag for require ocsp (client) addr address if client; NULL if server (for some randomness) Returns: OK/DEFER/FAIL @@ -787,9 +965,14 @@ cbinfo = store_malloc(sizeof(tls_ext_ctx_cb)); cbinfo->certificate = certificate; cbinfo->privatekey = privatekey; #ifdef EXPERIMENTAL_OCSP -cbinfo->ocsp_file = ocsp_file; -cbinfo->ocsp_file_expanded = NULL; -cbinfo->ocsp_response = NULL; +if ((cbinfo->is_server = host==NULL)) + { + cbinfo->u_ocsp.server.file = ocsp_file; + cbinfo->u_ocsp.server.file_expanded = NULL; + cbinfo->u_ocsp.server.response = NULL; + } +else + cbinfo->u_ocsp.client.verify_store = NULL; #endif cbinfo->dhparam = dhparam; cbinfo->host = host; @@ -881,24 +1064,37 @@ if (rc != OK) return rc; /* If we need to handle SNI, do so */ #ifdef EXIM_HAVE_OPENSSL_TLSEXT -if (host == NULL) +if (host == NULL) /* server */ { -#ifdef EXPERIMENTAL_OCSP - /* We check ocsp_file, not ocsp_response, because we care about if +# ifdef EXPERIMENTAL_OCSP + /* We check u_ocsp.server.file, not server.response, because we care about if the option exists, not what the current expansion might be, as SNI might change the certificate and OCSP file in use between now and the time the callback is invoked. */ - if (cbinfo->ocsp_file) + if (cbinfo->u_ocsp.server.file) { - SSL_CTX_set_tlsext_status_cb(server_ctx, tls_stapling_cb); + SSL_CTX_set_tlsext_status_cb(server_ctx, tls_server_stapling_cb); SSL_CTX_set_tlsext_status_arg(server_ctx, cbinfo); } -#endif +# endif /* We always do this, so that $tls_sni is available even if not used in tls_certificate */ SSL_CTX_set_tlsext_servername_callback(*ctxp, tls_servername_cb); SSL_CTX_set_tlsext_servername_arg(*ctxp, cbinfo); } +# ifdef EXPERIMENTAL_OCSP +else /* client */ + if(ocsp_file) /* wanting stapling */ + { + if (!(cbinfo->u_ocsp.client.verify_store = X509_STORE_new())) + { + DEBUG(D_tls) debug_printf("failed to create store for stapling verify\n"); + return FAIL; + } + SSL_CTX_set_tlsext_status_cb(*ctxp, tls_client_stapling_cb); + SSL_CTX_set_tlsext_status_arg(*ctxp, cbinfo); + } +# endif #endif /* Set up the RSA callback */ @@ -1292,7 +1488,6 @@ Argument: fd the fd of the connection host connected host (for messages) addr the first address - dhparam DH parameter file certificate certificate file privatekey private key file sni TLS SNI to send to remote host @@ -1309,20 +1504,28 @@ Returns: OK on success */ int -tls_client_start(int fd, host_item *host, address_item *addr, uschar *dhparam, +tls_client_start(int fd, host_item *host, address_item *addr, uschar *certificate, uschar *privatekey, uschar *sni, uschar *verify_certs, uschar *crl, - uschar *require_ciphers, int dh_min_bits ARG_UNUSED, int timeout) + uschar *require_ciphers, +#ifdef EXPERIMENTAL_OCSP + uschar *hosts_require_ocsp, +#endif + int dh_min_bits ARG_UNUSED, int timeout) { static uschar txt[256]; uschar *expciphers; X509* server_cert; int rc; static uschar cipherbuf[256]; +#ifdef EXPERIMENTAL_OCSP +BOOL require_ocsp = verify_check_this_host(&hosts_require_ocsp, + NULL, host->name, host->address, NULL) == OK; +#endif -rc = tls_init(&client_ctx, host, dhparam, certificate, privatekey, +rc = tls_init(&client_ctx, host, NULL, certificate, privatekey, #ifdef EXPERIMENTAL_OCSP - NULL, + require_ocsp ? US"" : NULL, #endif addr, &client_static_cbinfo); if (rc != OK) return rc; @@ -1377,6 +1580,13 @@ if (sni) } } +#ifdef EXPERIMENTAL_OCSP +/* Request certificate status at connection-time. If the server +does OCSP stapling we will get the callback (set in tls_init()) */ +if (require_ocsp) + SSL_set_tlsext_status_type(client_ssl, TLSEXT_STATUSTYPE_ocsp); +#endif + /* There doesn't seem to be a built-in timeout on connection. */ DEBUG(D_tls) debug_printf("Calling SSL_connect\n"); diff --git a/src/src/transports/smtp.c b/src/src/transports/smtp.c index ee260a129..4b5529fd8 100644 --- a/src/src/transports/smtp.c +++ b/src/src/transports/smtp.c @@ -101,6 +101,10 @@ optionlist smtp_transport_options[] = { { "hosts_require_auth", opt_stringptr, (void *)offsetof(smtp_transport_options_block, hosts_require_auth) }, #ifdef SUPPORT_TLS +# if defined EXPERIMENTAL_OCSP + { "hosts_require_ocsp", opt_stringptr, + (void *)offsetof(smtp_transport_options_block, hosts_require_ocsp) }, +# endif { "hosts_require_tls", opt_stringptr, (void *)offsetof(smtp_transport_options_block, hosts_require_tls) }, #endif @@ -178,6 +182,9 @@ smtp_transport_options_block smtp_transport_option_defaults = { NULL, /* hosts_require_auth */ #ifdef EXPERIMENTAL_PRDR NULL, /* hosts_try_prdr */ +#endif +#ifdef EXPERIMENTAL_OCSP + NULL, /* hosts_require_ocsp */ #endif NULL, /* hosts_require_tls */ NULL, /* hosts_avoid_tls */ @@ -1147,13 +1154,15 @@ if (tls_offered && !suppress_tls && int rc = tls_client_start(inblock.sock, host, addrlist, - NULL, /* No DH param */ ob->tls_certificate, ob->tls_privatekey, ob->tls_sni, ob->tls_verify_certificates, ob->tls_crl, ob->tls_require_ciphers, +#ifdef EXPERIMENTAL_OCSP + ob->hosts_require_ocsp, +#endif ob->tls_dh_min_bits, ob->command_timeout); diff --git a/src/src/transports/smtp.h b/src/src/transports/smtp.h index ef53292bc..4bea2030d 100644 --- a/src/src/transports/smtp.h +++ b/src/src/transports/smtp.h @@ -23,6 +23,9 @@ typedef struct { uschar *hosts_require_auth; #ifdef EXPERIMENTAL_PRDR uschar *hosts_try_prdr; +#endif +#ifdef EXPERIMENTAL_OCSP + uschar *hosts_require_ocsp; #endif uschar *hosts_require_tls; uschar *hosts_avoid_tls; diff --git a/src/src/verify.c b/src/src/verify.c index a1b8142a9..52404575f 100644 --- a/src/src/verify.c +++ b/src/src/verify.c @@ -634,12 +634,14 @@ else else { int rc = tls_client_start(inblock.sock, host, addr, - NULL, /* No DH param */ ob->tls_certificate, ob->tls_privatekey, ob->tls_sni, ob->tls_verify_certificates, ob->tls_crl, - ob->tls_require_ciphers, ob->tls_dh_min_bits, - callout); + ob->tls_require_ciphers, +#ifdef EXPERIMENTAL_OCSP + ob->hosts_require_ocsp, +#endif + ob->tls_dh_min_bits, callout); /* TLS negotiation failed; give an error. Try in clear on a new connection, if the options permit it for this host. */ diff --git a/test/README b/test/README index 7e778eee7..c64b02206 100644 --- a/test/README +++ b/test/README @@ -843,9 +843,11 @@ and port, using the specified interface, if one is given. When OpenSSL is available on the host, an alternative version of the client program is compiled, one that supports TLS using OpenSSL. The additional -arguments specify a certificate and key file when required. There is one -additional option, -tls-on-connect, that causes the client to initiate TLS -negotiation immediately on connection. +arguments specify a certificate and key file when required for the connection. +There are two additional options: -tls-on-connect, that causes the client to +initiate TLS negociation immediately on connection; -ocsp that causes the TLS +negotiation to include a certificate-status request. The latter takes a +filename argument, the CA info for verifying the stapled response. client-gnutls [] [] \ diff --git a/test/aux-fixed/exim-ca/README b/test/aux-fixed/exim-ca/README new file mode 100644 index 000000000..b8d2a41f9 --- /dev/null +++ b/test/aux-fixed/exim-ca/README @@ -0,0 +1,51 @@ + +The three directories each contain a complete CA with server signing +certificate, OCSP signing certificate and a selection of server +certificates under each domain. + +For each directory there are a number of subdirectories. + + CA - The main certificate signing directory. + + Within this directory the primary file sof interest + will be the two CRL files, crl.empty and crl.v2 + These are valid CRLs; the "v2" containing the two + revoked certs. + + BLANK - a template usable for client-only machines + for clients of this private CA. + + *.example.* - individual server certificates. + +The six certificate subdirs each contain a cert for a machine +by that name; those in the "expired" ones are out-of-date (the +rest expire in 2038). The "1" and "2" systems/certs have +equivalent properties. + +In each certicate subdir: the ".db" files are NSS version of the cert, +the ".pem", ".key" and ".unlocked.key" are usable by OpenSSL (the +ca_chain.pem being a copy of the CA public information and signer +public information). + +The ".p12" file rolls up the CA, Signer and cert info. Both the ".p12" +and NSS info are passworded using the "pwdfile". +The ocsp request file is one a client would send to an OCSP responder. +The ocsp response files are those gotten that way. in .der format; +"good" being all well, "dated" meaning the response (not the cert) +is out-of-date, and "revoked" meaning the cert has been revoked. + + +The files were created using the genall script which utilises a +combination of tools, + + openssl + nss-tools + clica + +of these the only unfamiliar one is likely to be clica, a command +line CA tool which can be found at + + http://people.redhat.com/mpoole/clica/ + + + diff --git a/test/aux-fixed/exim-ca/example.com/BLANK/CA.pem b/test/aux-fixed/exim-ca/example.com/BLANK/CA.pem new file mode 100644 index 000000000..d51c5d089 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/BLANK/CA.pem @@ -0,0 +1,10 @@ +-----BEGIN CERTIFICATE----- +MIIBaTCCAROgAwIBAgIBATANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAwWhcNMzgw +MTAxMTIzNDAwWjApMRQwEgYDVQQKEwtleGFtcGxlLmNvbTERMA8GA1UEAxMIY2xp +Y2EgQ0EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAxYR8NYQvEd7/e4MvOj9dh2+o +mnywT9ajMo1589DWt2z14ouRKhSZWlx4O4AicPZc6n4uvt7++t0tTHhmm5JIbwID +AQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjANBgkq +hkiG9w0BAQUFAANBALjVd1KMBadFJFIzTEspoPYxJvXKvLMclekQs5QY0lmmUj5+ +ugITEG6ywu3s+REUB+8Dj+ofQz3tgIm9NBpkfsA= +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/BLANK/Signer.pem b/test/aux-fixed/exim-ca/example.com/BLANK/Signer.pem new file mode 100644 index 000000000..fc29ebbda --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/BLANK/Signer.pem @@ -0,0 +1,11 @@ +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAxWhcNMzgw +MTAxMTIzNDAxWjAzMRQwEgYDVQQKEwtleGFtcGxlLmNvbTEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALGUYGllRw9Y +7ATtT3iqwv3rnnpYYWaxGdamUYznYS6l8lAyHFOqfEktdHZ+bUyRVWsbvyx/a2St +u1vpZpkihvMCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLmNvbS9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EApouSZ4cX2rx+pZWcDHJH+KaCMpMa +ScrHO8bFSCWI02ckzoIxWfu1DMNO++EpyzrTgyaXoCROjvhdslwucMqAIg== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/BLANK/cert8.db b/test/aux-fixed/exim-ca/example.com/BLANK/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..f82510ff6868f62535a179d7d77d9c06b55dc2fc GIT binary patch literal 65536 zcmeI*e`wTo9LMqZ_xrt_S9#8P%gtZ8)?Cc=?)$wd)a3d$MmX8foEUS>=$N;8c)J_t zRcEbhOqs>3@W&`k1PRq2p*aH0A0@WF-<{xXDRd$h`250$ z&-eTJe))X9p9kN6->@}ll5*T zY&B0>Qx#QJ6y5E-XLe6*&n35_=H!B|(vFMGXHwoHr~dl$ zhq?91)_1qm##BuaWp}w=HnOJ~9z_{;xOAu0*;}7r?Px~6J?5}9oZ0VSQE1h2=(`si zHs$SovaF%9zOEvD(I~$#aQNW#zS9#AZYw^qqQBws)F-NEV)Ve#p|gJ!6ps5%d+W^1 zn!r%k>z~b=x+?WWO(>oSw_03@P)YUkiPf=qII&KwmH)l6%lgIrBRM>;-gr%yCZdR2 zWLdZ^8jiM=*pG?K5m9rPT+=IW@_9_tr(`~lNtw?hdl{D%9`JN1zBU|-ic`*+hs<8{ zcwk4MF7TMuZdbAZ^B{l#0tg_000IagfB*srAbfSKdiAbI z++dRkAb zq~RuKGLob|47ML_FOK+5oT*3d=RK+KWg!9xAbP= zI#nIDZ}W>l009ILKmY**5I_I{1Q0*~fpi2qUhAm8yY!N|Uzra~?|7?r9o77BRr@8Q z{Y|&v9O(1r!rj!vmA7*;H&g81>`gAqNHHo$ucJmXFC5GY(W441Q0*~ S0R#|0009ILKmdV%6!->7MV=D? literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/BLANK/pwdfile b/test/aux-fixed/exim-ca/example.com/BLANK/pwdfile new file mode 100644 index 000000000..8b1378917 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/BLANK/pwdfile @@ -0,0 +1 @@ + diff --git a/test/aux-fixed/exim-ca/example.com/BLANK/secmod.db b/test/aux-fixed/exim-ca/example.com/BLANK/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..8a8319376946a7d06786ae3f5eea38de6da69169 GIT binary patch literal 16384 zcmeI&!Aiq07{Kw*O~wu~y?7G|c*srI0~FDDk?I)K7pQGE%4R#d4)ow-c-L1FJnt}H zLuT4cbO?f%G35V2Nb)89lK#$-#(pRwHIeNXkv%(<9g!{Dl}(z^{TIy+@{C$ zVQzC}lzYmy_Gr5Mto>XLL;wK<5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 zU{eHY^0qr`y|!kpO}P>GKmY**5I_I{1Q0*~0R#|0;O_zrQ8Hh7AMV>Cv28AS& +-----BEGIN PRIVATE KEY----- +MIIBUwIBADANBgkqhkiG9w0BAQEFAASCAT0wggE5AgEAAkEAuGANFQATQUtX6l1r +tDa/TimQ722a/2wGSmty/n9Va36t7O9S0Uxi7yQMN11I284FekjzP82THLWv4TJZ +x7AvywIDAQABAkAhrko1f+IEl4Lj6VT3gtjHqogzdM5PwqgTiDVlkFVGYXp6a8o6 +ySmMofHeEjDgPFI7sz12eQOoofjhjTCnTcJhAiEA3Afe796M2vm5+V6t1ayFhgP0 +9QnSVde6mLvqHFHAKHUCIQDWhAVspNc3bw2PIBqlK2ibANwi9BFurBlATBHhKP3v +PwIgTiwttKMpABOBU2uj7ypgNgDp4rUemYkPrnv07SLOVpECIAVXhEsQT8uxmETY +J9G1IwW5H8I/EbAP2REg09EnlCtBAiBgZn9NxSr05na0P+NjyIPQ44Y9L5R9P3PL +2PceGVDcQw== +-----END PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.com/CA/OCSP.p12 b/test/aux-fixed/exim-ca/example.com/CA/OCSP.p12 new file mode 100644 index 0000000000000000000000000000000000000000..208dc6981ad8d972d57c6d591548c25199fc245c GIT binary patch literal 2210 zcmZvdc{CIZ7sh9p!N@X(>@qZ{P&3)1n2>!}mLXdvWXMvMYM4oOhKM8@DKTZqmVL{M zEX~;WHDix#uS{OO`qsX4zI)ESe>~^j`_Jz==Rt-u0hy8EERZvi`jLB_Kvp0*91#v8 zvgsnj|Bnp(iX;M;kDAVM>|Ylg>_8?m5g2(S5|IcN_J7MqZ}~w`SG6oj!a(8MU=HO& z-Qa!(6B8>9L$_lIL0}qN7v`ekFdusb^SP86Fd!*@Fk}$SD$kS5>ZI3aI=$7flt^^E zH`=Iw`i8mUWy2Ef-WhJ0_8t0mOwlQn2L6IgaOPE=09A#|-1lXwXS2PN9=*?VnHBLw zN9)**eN{ZR>jy8Z<|)Iz7F$);9To0TSBXrq{L4MebL9Xzb0&+$86a0XFPoC~=zI0l zvp*g;=N(Q~b(onn+96lQgMK*Yi3PMgRM~OpP|JUN>Ff39jqY-SRqPcWQYd4j)PGo`9PGAAmc+A9?b>YsXRiAilgs3H63ty#`xf#h^LLpky+I zdkFB4`rQXC)#^I@m;lpk6&#Nhk2vHjQ80M+*;C|QjRAsw|5`1^PRrF5L62vU={gZ<(GU$lP z^q72@UWP`%W}HHp4-T2VX1a54owLd$I;3vf4Ha%(30A|eZYpKUVD|wF%DCFaR$Ls` z*LmR1Kto*4!lM0e+?vhPs-xl4Xy#)#MsxTtIL}y+hfVL%XV%^@Ky96)LS*RPrI&OA z#D(3wZ}e@VV+upVUyx2RVRw!T!Gvq>X2g{`H z0cUk%68OZsm=SeB%`w&hn26uYDjh1FvKG~h2y!dK)Rn1W&&BRuDg=)$UmC|0)Pw}P zOwN~ptLo(gaObvsTV|BAhNoN!$06xjs(Xvw#U!uic*mEA1_w1$kutAdQA-wsfUdsL z5mDXaxqKfwI42GZWY!|A5Z(I{^NL76avEt%$>YPrDxI|%YUXZtOKwViGj$YRgaf(!@n*^{_|@ILN$}o4Iru z#z@Q|Rh9b%B+^ftye;z$ZnQXwJH`6R+hz%0!=QwTO*otP{@Et+!qOSKbOIdS*zBBm=;UjCwO-=QdlgAesMo#yU2Ugc{v`UvT2)Pp)r}*w-gMlRaNV$qzE_I-5oeAp<^==pps0 zE-ZenG)B9uM9dwb$_+H_O|hXxyhHuUb)|AUdD%!>EL#2S9m+>cs0#D`V;PYQbJlGo z55H&MWK&efWcV(Q>aSj*W(c4Qnx2ilD2_^Y>hdzm#)fERa*Lq+EBiVg!Ny{e3W*=K z!C%~Ceg;hLAKdvaEK#(AoA47`xMtoes{JG-ogzT>ZOx5a&z4#NNnA`1=GWj^^l|;~Z74qc!)rSM&)Wl}P zexQtL#d%u_dBDo24D;zlvT!|Q?{l2>;_!&_kGZpp?!X#p8_8yoY0aU})%A9!i%Vc{l&Imcl>a=YIk?@+@;Fz=Gl zpy|#Qmw8MkrSuq308Tr+e?~lNymttDQrv)Nh~n4|FDX9#isr~WzpA&O`MpGMv#8BU zdSqjMtVUFlzdraxmVfv2dM!@_-6Xp-Ed0uT`eEa~Wok1m_TuBFMwLVtH{;+5d$Pbe zZ$pQ`<5E82MlWvggnFw|OI=x^c=WpyW{s5~wr;A52Og`;^v}@veInJ65=aOOSeA>K zNf-(x?ju?bQ44|&Nlp29cUgjTO*A;DKNe?xg$4ldH@#p8 ASpWb4 literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/CA/OCSP.pem b/test/aux-fixed/exim-ca/example.com/CA/OCSP.pem new file mode 100644 index 000000000..f78456dd6 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/CA/OCSP.pem @@ -0,0 +1,11 @@ +-----BEGIN CERTIFICATE----- +MIIBgDCCASqgAwIBAgIBAzANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwMVoXDTM4MDEwMTEyMzQwMVowMjEUMBIGA1UEChMLZXhhbXBsZS5jb20xGjAY +BgNVBAMTEWNsaWNhIE9DU1AgU2lnbmVyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJB +ALhgDRUAE0FLV+pda7Q2v04pkO9tmv9sBkprcv5/VWt+rezvUtFMYu8kDDddSNvO +BXpI8z/Nkxy1r+EyWcewL8sCAwEAAaMqMCgwDgYDVR0PAQH/BAQDAgeAMBYGA1Ud +JQEB/wQMMAoGCCsGAQUFBwMJMA0GCSqGSIb3DQEBBQUAA0EAQalK8cinGimBjryO +q8scOPr7Zkv2RlhnUUTtpPfFKkTne9yXyXxBVDfy8wwPTz7ZTOzMVtPTgFT9g0Kf +tXze7g== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/CA/Signer.pem b/test/aux-fixed/exim-ca/example.com/CA/Signer.pem new file mode 100644 index 000000000..fc29ebbda --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/CA/Signer.pem @@ -0,0 +1,11 @@ +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAxWhcNMzgw +MTAxMTIzNDAxWjAzMRQwEgYDVQQKEwtleGFtcGxlLmNvbTEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALGUYGllRw9Y +7ATtT3iqwv3rnnpYYWaxGdamUYznYS6l8lAyHFOqfEktdHZ+bUyRVWsbvyx/a2St +u1vpZpkihvMCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLmNvbS9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EApouSZ4cX2rx+pZWcDHJH+KaCMpMa +ScrHO8bFSCWI02ckzoIxWfu1DMNO++EpyzrTgyaXoCROjvhdslwucMqAIg== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/CA/ca.conf b/test/aux-fixed/exim-ca/example.com/CA/ca.conf new file mode 100644 index 000000000..90875899f --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/CA/ca.conf @@ -0,0 +1,18 @@ +; Config::Simple 4.59 +; Thu Nov 1 12:34:00 2012 + +[CLICA] +crl_url=http://crl.example.com/latest.crl +crl_signer=Signing Cert +level=1 +signer=Signing Cert +ocsp_signer=OCSP Signer +ocsp_url=http://oscp/example.com/ + +[CA] +org=example.com +subject=clica CA +name=Certificate Authority +bits=512 + + diff --git a/test/aux-fixed/exim-ca/example.com/CA/cert8.db b/test/aux-fixed/exim-ca/example.com/CA/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..5ae12015d9c8c60ffb373db1e4098a82fd0e5dcf GIT binary patch literal 65536 zcmeI*dsI}_9tZG!W_T(H#PAe^6fsDcGs9B^Ml=(FM0^73MZ|%S=LJ*}M8L#KO+?LS zMus2?;yXdmQqX`z4fC3>)JlyDVxpLuaL-{-Im1vn%j?RuzOZJ^%o*nFJ)g6Gd!Ik} zo*`-mp@a|~Au8VyGK_gh`Vc}fckGR5bUt8S@7TcaxbJw0n6r;p$IkzWxo3aazhQ4L z{YOLApO@Y)8iW7@AOHafKmY;|fB*y_009U<00Izz00bZa0SG_<0uX=z1Rwwb2tWV= z5P$##AOHafKmY;|fB*y_009U<00Izz00bZa0SG_<0uX=z1Rwwb2)rl(Q*vK&S8_>G zEJ>H#_9*j6@{oAkc0cK!?C#}m0ciK$;vMnIN4hwwES{ z#>7WU?Ze_?c#1X>4d$z1DPllKf^<$?l-yegabW^$HME0BK)=TBx|e?ME_)R9rA=fF zz7`f885U|eJ~ARUGB(0;gft39>wGFm`1hL zG;OoIv+iqCl&UIGst2@uQxK}RBF=Tt>W^Z48#tFu%!$}m@4aprk53Wmi;S=6j0(CBV`#2JQSB-!e4ff}+LC=fkbQ1Q3)D2; zRAWBBI-h#_h)0XrzpzkwleVD;Jj1EnbCMMZ4n`y@< z@24o0H)w0x>dAAO$};YJdt72zys*mw7Sa}MOL{8Cv|*+|(J}1G!yF~P7ug;k95ZQu zLfg^>DLOp+eV#>EY&626)>`{aymmY{V490>@H=;H&Tp`{DOS_bZ291fpwBg*My>j- zlUthlJls`Qqo@^Tgeo@(*~+k_`-#kGQ|5y(m7$*~O_(E1;1-60ZO`hWvuZ?LT?ug} zBtoen$t?>-JMUi2og|zt@Dyz%&q_+8qoh=rlG-6FDJopOi z?y;iwM^t5>kF~B&t(>M}dBI~wa{A&CKD*lWzby8iOgD~N-P`KtLVnrBZQ(aQT=L1F zUH7(EhW|3NVd=pk-)3e#s9dn-6|N{Q5O>~VDk?-Y=F;tk(}F~2&Ge|VTZk#(|sd)r;Kp?*K)f7Gro`Za8fu@nBkzz ztS(zF1cbL3F*4b5i*$h`gGc+hu!JXI-q?pbC0T~Piw&$Ke0 zzHaR9BTbDD^aSe7{N)W6BRrbYKdf*xotgF(doB|h&YayONiDr*C%qe&5SjEIVOswC z%Iu8Jtkr*ei0~A*sll9!O_C-gM#jYwOL9iCNHSOAA<>oidU$%Mdepg#hCXzwcRl2~ z&ULPTo@!ww70WQw0}`oBfx$j009U< z00Izz00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_009U<00Izz00bZa z0SG|gA0(imLdcJV&>0u$jK%D~-gAR0O64$&b;PvDffk8fL{4Hy2bW;lju!B!@b23U z*i2ye&D=gP|L*Ub?bx=ecxy?eM%$ugAP2*(h?o zbi_hypl9>&u!^=ftA5WuIDYm=R(0nV2P7J9er)x1U(?`$eQ*8|D{VgfDrUYE0(Be4 zg6imDexA!u#13$H_>GUpo;3dkvU%>xbrlhh=4$=C?6m1<2czn>I@b9gg+)A&sM$nJ z%o!lDUUDy|{iCo|w-^4Rs1+tfsoWs!F_Fj_h))uUoQ<71%BO)b?u#9TQLSWQ{6(ts zSzV|T0h2D~Gl{9K)6}9_D^}khExEmE$(6tl^oqRu{oK6aar?8~-$>8zJ|xm8uT8DVrUdU8Zcgn69FJ_c%7o438BYnN_>UWOl}8_tLcOK?jnI zqQZ8RxB3*^=r=N8la6ypOzn^P8|@YzU%ffBtgd>m$)o`ut9U|_*PM*EtIvIfr)VFI5F9yZPhHvHM6Vp1Uq)Q z-}$L&|G3`NdbP-=1pb^EIc}J=cWZ?$0h|&k2vqnUq#@ z!qy@r$Ma&YcFx_sky9u5J}BO}dHT(qn#72SvmTFGd$;P3lbRO-=IxuDsyjPl#}rH7 zB=c8yzUKOLJB!)b9Mv>(LzSQNsqx>I=GCjG6;aDdgvZ@24we6KMb-R%`_TnA;(|&R zEibCbNWMPP>q_0(&)d&yWb#@q!qdlC-cmG7DCH97%;-`X#{N?86D?+Br876%&e6qx zDWgk?#CeY+?!a_y1ETNcJGo(6)L!SqV{EdUW7fAvtNBDFv@Mtzl~&x?JnppLjAkn> zmucP?>Qv`>w@6N`G}~8lRUCADr?6Hw;%w9ircCU;zXM2qhAG*s8 z;Me%=r26{w36B>J|7>6CPX~(**p?jj#^=Gutjc@f2lWwFb(x}| zNBgvnj(K#|rq-=~q4ksC%f_kI=F#?@mywZ`mBGN+P{crpjX9KsOPD*gA~ClhCsi*wKi5#& zKoTU%EG(3qlbM{T5S*EwmzkHY;G9}iBEfHDU}$V$Xk>0^YGh(;5`|_cvm--~W|qkE zEr(rxG71M7Jej}4I@*F)$vmfTtq*6NdV=HCfP}C6p4xD=zMndKwMs)tN5pkK!nW) literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/CA/crl.empty.in.txt b/test/aux-fixed/exim-ca/example.com/CA/crl.empty.in.txt new file mode 100644 index 000000000..250311c00 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/CA/crl.empty.in.txt @@ -0,0 +1 @@ +update=20130127152434Z diff --git a/test/aux-fixed/exim-ca/example.com/CA/crl.empty.pem b/test/aux-fixed/exim-ca/example.com/CA/crl.empty.pem new file mode 100644 index 000000000..fdc506dc5 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/CA/crl.empty.pem @@ -0,0 +1,6 @@ +-----BEGIN X509 CRL----- +MIGsMFgCAQEwDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhhbXBsZS5jb20x +GzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydBgPMjAxMzAxMjcxNTI0MzRaMA0G +CSqGSIb3DQEBBQUAA0EAjClqFKe0w0T5ARNSMOSfuDtbOA0iN2yOrUwJfidgQdVQ +YPW+5TwKhe+Vm6skgHSIWNcuMVzojsuDZcBZnNimPA== +-----END X509 CRL----- diff --git a/test/aux-fixed/exim-ca/example.com/CA/crl.v2 b/test/aux-fixed/exim-ca/example.com/CA/crl.v2 new file mode 100644 index 0000000000000000000000000000000000000000..66fb34ddc6f0ef1585d0f8eb18d946b6452fe0b3 GIT binary patch literal 223 zcmXqLykpSV&cw)Qz{|#|)#lOmotKf3m6gH3*ighkh>bavg-e(_wIVUMASYEXIX~A> z+CUN{$}B9DoRgWHs1Tf)o|l=IuHc+nR3gD|WMF7)U}$7+Xli6)Y#wExYaqhJn1(4X z%EZKQ3R4)>4a|-V-V;pzO<5bTQ(j3R(CB`1?F(<#U75uTryIQl0GW6}2><{9 literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/CA/crl.v2.in.txt b/test/aux-fixed/exim-ca/example.com/CA/crl.v2.in.txt new file mode 100644 index 000000000..434045ffe --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/CA/crl.v2.in.txt @@ -0,0 +1,3 @@ +update=20130127152437Z +addcert 102 20130127152437Z +addcert 202 20130127152437Z diff --git a/test/aux-fixed/exim-ca/example.com/CA/crl.v2.pem b/test/aux-fixed/exim-ca/example.com/CA/crl.v2.pem new file mode 100644 index 000000000..da781d7d8 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/CA/crl.v2.pem @@ -0,0 +1,7 @@ +-----BEGIN X509 CRL----- +MIHcMIGHAgEBMA0GCSqGSIb3DQEBBQUAMDMxFDASBgNVBAoTC2V4YW1wbGUuY29t +MRswGQYDVQQDExJjbGljYSBTaWduaW5nIENlcnQYDzIwMTMwMTI3MTUyNDM3WjAt +MBQCAWYYDzIwMTMwMTI3MTUyNDM3WjAVAgIAyhgPMjAxMzAxMjcxNTI0MzdaMA0G +CSqGSIb3DQEBBQUAA0EAS5A0/pStULkfIhBRMt+DfehLBbppc6FftG3TpBMvBW4k +xGwMPKUN8lk3uMuQxk/cvbaFqPtiR/WnkAFc3i1bpA== +-----END X509 CRL----- diff --git a/test/aux-fixed/exim-ca/example.com/CA/index.revoked.txt b/test/aux-fixed/exim-ca/example.com/CA/index.revoked.txt new file mode 100644 index 000000000..d69d74d0c --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/CA/index.revoked.txt @@ -0,0 +1,6 @@ +R 130110200751Z 100201142709Z,superseded 65 unknown CN=server1.example.com +R 130110200751Z 100201142709Z,superseded 66 unknown CN=revoked1.example.com +R 130110200751Z 100201142709Z,superseded 67 unknown CN=expired1.example.com +R 130110200751Z 100201142709Z,superseded c9 unknown CN=server2.example.com +R 130110200751Z 100201142709Z,superseded ca unknown CN=revoked2.example.com +R 130110200751Z 100201142709Z,superseded cb unknown CN=expired2.example.com diff --git a/test/aux-fixed/exim-ca/example.com/CA/index.valid.txt b/test/aux-fixed/exim-ca/example.com/CA/index.valid.txt new file mode 100644 index 000000000..126acf7e4 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/CA/index.valid.txt @@ -0,0 +1,6 @@ +V 130110200751Z 65 unknown CN=server1.example.com +V 130110200751Z 66 unknown CN=revoked1.example.com +V 130110200751Z 67 unknown CN=expired1.example.com +V 130110200751Z c9 unknown CN=server2.example.com +V 130110200751Z ca unknown CN=revoked2.example.com +V 130110200751Z cb unknown CN=expired2.example.com diff --git a/test/aux-fixed/exim-ca/example.com/CA/key3.db b/test/aux-fixed/exim-ca/example.com/CA/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..30718a9967c061e2dc8ddaac80d0b24d361a54a1 GIT binary patch literal 16384 zcmeI%bx>4a!w2wPq?QIr0cq)4N@@X7>23jOkZuI&PNj2^7KEiiIwS>YR3w*1Sh}PZ zcz^zWzBBJ1&-mZ-%=6CdnYnY$+R{JKx0I;){(fCAUhC1_Yvq08N1!9}b0UxqPhG#KvD-$W#?_H?V!$Tus`v6B~{l zNb*cbCr*<3`R=>|5l@hZ54MX!^V8n5S|E+^kd@#1(ExiF)|vU5dHC6>q6ZmAG&PxH zN``k1o)Op@DOL12qnce}FMv+k!RQo5*TJ`7m->BGf&yLTtKNNG%6Q{76(gAP$mEpF zBFWWK_IY369!0pa(_@Q8aoTmJnI+Znsc2BC&Rj8Nr z7;nK6SBYjH7gN-PnmPI@hk(`GxHwnUXO9tuRx!#*}6B-MLzTO?^GlHMXHu*1bxINIBY$4C2r|De4kTsfocCq zRUgpxlX_IvQ}5c1Ke+4K+NXVDr}nuYuG zXhs7&DT|5SXH>H_em(f{`2{8q-Gu6G=ySIztDBfkS=eWb=kIpa#uoH)DGLFuWcusJ z4-<$K3@UvE`HE-cS_QNzbf0yIhID88yzl89bc<~yKFb(VsD!WOW`f(yCblTsMJoFk z<|Z|;oeR}vMNc0mnmuHd=}IhrFCG(VVnNlq9~#bTF!ekv;ad|q2Hn1Ey!F(&(ri)! z_#MCccdYwti@G|3Q0?%w>!P_Ju}v=cM}`LA3md_LLYcf4^8S);yPLzyKd+jTBNvNlV`ErOrN8;}^Psr7}E8-C2qz(i6V)yfLs+TKLpghTie5qs_jFL;E zv%n}lXamBk$g%(nAp20{sNOKwVX-^lfiLlmdf+GHS#w(So$}EU&vkn2$KJLf$dj)o zadHabpPF3lBB-cJ`+%XndIIQUdxsh?qGLThlb$Q^#t{K+(J%FA3xGok2V zjdbuU4OH}596_?DViUTg7hK-Ay4l)+i+S(k+wFy{hT+g4Bx`%@1EedTqtL6^NQPLg z@W?5x)oZx1%qLgpZYrJJfavAzHe(VtZ=D`vn&ejux$mhfS;0K?AH&NiZcivlEN?Uw z8*KU#W}O}k`t=&4)6Yqodk00zD%RZIZLE;juI*YiDFkc!C*d5uLWwu50M`ws+J*oqTO;&0WPs0ZdPYC^)wna!JH`3vYGw+{z@|R7*-<|N|?7Em7Dg(ciH-~xyO@79(G){iqT+n!5f~$AhW$`1HP%YlK zmDhPRO5$%W6#HVwunl%!V~5PAfF$Lr1y{L*wl1OmE0kCYa2LjIQN`R0rNAqxcIb88 z*@LiY$np)A75Dh@($L@lWO2>WEaz*be_6!Xu~v<7pLe zM|_K*lkm^@o8MU=HZI(+K`q3!xeEzi*3L<~0iQ=W=uDCz^LhA5C-t^Q+DaD{*#)MX zNuS+qbnLEGGfw)DW1u;WS0D8Jh&+QU4e6CUX#bEV{ABIkL&%G^pp*&J6?7+`<%ubS$|0rIIp}C-vvi~E9T=~6>EiS*h04E8^ zf!W9XT21|;8MWWZb|2}6A-5zQkd zXB7|e^EnBe1!#1xEP6BFbn00 z%tI*Ko-?-wNb(@rK7OT-;;~BX#m715uWy0cvog>F4(F|I=o7!7kIj~+g2#}{Kc)#F;$_&PwHHiR)7_uE;MDLxtCu8fi%!q~oExKouq zVc#+9)&Wz|-t8t($3CE9XJ2zd*?gZFPsCV$ZWQB{{IS$XGR=poWw61gYTlt{b%LXE zy7n_i-~tDIx#zlpdH$h|gR{Ar1Gl@GgU20Gps4-mV3T~!Dbc%A{;Or8l3U!cp#8S0MCCAk%EpkY z8sAFme}=iH);z{)8?KnlwK$K4zzS1i9_hVx?K_w!HCE_;E`L7Rdf1i}oANzVn1uEzcO{(dkGHck+U3<}T`c z&seB8kxo|ooqw3TT&)(beOpSER80`6NoUO0%9c$t{XKcnQJ|e5T;rz`sDjpH2UKEG zNK2C$oVm)D-a`r>xk#&vi7g$0jG<8zhnd*2sxO3t&bWmHufc&k8%l^yLf-o5Lj*;(_dzj!t4*OX)?1JB`6gkLdlo9rmKioKQF)^2&mM2{nK8!Jy=3$u04+wS zs4dRuGlz~JLeC@~h#w9n?nON)Qh0J|-q4jaM-lz1;1hQr={BzZB1tT)j_Ey^KMP|ELie2=}zyIMIB{i<+oU<3)Vx<81x;MTV!qgmV z`TdRJV+xKp@TFxGO{fa&E)srL$}0e4(RG_zRO7~_kfaYneJX;dz_;d3502L&U#^G@ zofQMhur$cU!4(7!P{^btY4wdr3fMLGeKS@P<#1v9q#D5m&XIV-QcqG&c>s&&{mWq|W1T*v5SXtww?)y(|!PqaJ-{kgAy}S_=)sW|HxyR!NvS3zS zntAWOmZXP>mIqRw_Lko8#+I#AOKK*Ot5Fw$FO_tQF%?`3gK283qwYW)dvD8)s3RK= z7S3lr)jv5MgYXcN5^(}Y<4Pn!Iivk^-rFCQvtF@%=&~G7k*#ak`XLfPpd%>tPG2aN zMEFr!m8ztl*H->!0o;^V((*Mc}^fUb=gr6H81xC_4;dks;(;lVWOXB}b^g zgTAZgUDkcQo%2fH%({kZs#qiLhZ)biBXuy1R+*myw})4NqjI8-J#{BnpuJ^9tKpV) zCS%0$A5s{<}Z|l#C z%8g(?N?elw<<%1AP4=Y`U+7!`H^2u%zPI8sy}wA#h#ssO+Hb~tdTHcm@=~#npqN3e zw>m)V`xCjk*;_;_=b}Ob%lS_Dil8Qp+KlsMMgD7d?Jf_3F8F-dU=BBY_@0$Q_s!jW z67SZ-El$_=J*L(*m6)~JaQUX95&EBB5Fk5yZGtn9dK^aCa`p66GM$Fz#>h{FET^Ha zmx`hST=`zKZzq2ux~n&c$VSG^7h5hyvfOR6Hy5e%%Z*Gb)=_LIgsn3K|N)S|BD~01&IY_(3 z+HOx+9G5=u9^~5oPN=1GX : tunables : slabdata +bridge_fdb_cache 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +fuse_request 0 0 632 6 1 : tunables 54 27 8 : slabdata 0 0 0 +fuse_inode 0 0 768 5 1 : tunables 54 27 8 : slabdata 0 0 0 +rpc_buffers 8 8 2048 2 1 : tunables 24 12 8 : slabdata 4 4 0 +rpc_tasks 8 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +rpc_inode_cache 8 8 832 4 1 : tunables 54 27 8 : slabdata 2 2 0 +hgfsInodeCache 1 6 640 6 1 : tunables 54 27 8 : slabdata 1 1 0 +AF_VMCI 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +nf_conntrack_expect 0 0 240 16 1 : tunables 120 60 8 : slabdata 0 0 0 +nf_conntrack_ffffffff8200cec0 22 26 304 13 1 : tunables 54 27 8 : slabdata 2 2 0 +fib6_nodes 22 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0 +ip6_dst_cache 13 30 384 10 1 : tunables 54 27 8 : slabdata 3 3 0 +ndisc_cache 1 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +ip6_mrt_cache 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +RAWv6 67 68 1024 4 1 : tunables 54 27 8 : slabdata 17 17 0 +UDPLITEv6 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +UDPv6 4 4 1024 4 1 : tunables 54 27 8 : slabdata 1 1 0 +tw_sock_TCPv6 0 0 320 12 1 : tunables 54 27 8 : slabdata 0 0 0 +request_sock_TCPv6 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +TCPv6 9 10 1856 2 1 : tunables 24 12 8 : slabdata 5 5 0 +jbd2_1k 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +avtab_node 502203 502416 24 144 1 : tunables 120 60 8 : slabdata 3489 3489 0 +ext4_inode_cache 74762 74820 1024 4 1 : tunables 54 27 8 : slabdata 18705 18705 0 +ext4_xattr 9 44 88 44 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_free_block_extents 32 67 56 67 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_alloc_context 28 28 136 28 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_prealloc_space 18 37 104 37 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_system_zone 0 0 40 92 1 : tunables 120 60 8 : slabdata 0 0 0 +jbd2_journal_handle 32 144 24 144 1 : tunables 120 60 8 : slabdata 1 1 0 +jbd2_journal_head 74 102 112 34 1 : tunables 120 60 8 : slabdata 3 3 0 +jbd2_revoke_table 4 202 16 202 1 : tunables 120 60 8 : slabdata 1 1 0 +jbd2_revoke_record 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +dm_crypt_io 50 50 152 25 1 : tunables 120 60 8 : slabdata 2 2 0 +sd_ext_cdb 2 112 32 112 1 : tunables 120 60 8 : slabdata 1 1 0 +scsi_sense_cache 25 60 128 30 1 : tunables 120 60 8 : slabdata 2 2 0 +scsi_cmd_cache 28 45 256 15 1 : tunables 120 60 8 : slabdata 3 3 0 +dm_raid1_read_record 0 0 1064 7 2 : tunables 24 12 8 : slabdata 0 0 0 +kcopyd_job 0 0 3240 2 2 : tunables 24 12 8 : slabdata 0 0 0 +io 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +dm_uevent 0 0 2608 3 2 : tunables 24 12 8 : slabdata 0 0 0 +dm_rq_clone_bio_info 0 0 16 202 1 : tunables 120 60 8 : slabdata 0 0 0 +dm_rq_target_io 0 0 392 10 1 : tunables 54 27 8 : slabdata 0 0 0 +dm_target_io 844 864 24 144 1 : tunables 120 60 8 : slabdata 6 6 0 +dm_io 828 828 40 92 1 : tunables 120 60 8 : slabdata 9 9 0 +flow_cache 0 0 96 40 1 : tunables 120 60 8 : slabdata 0 0 0 +uhci_urb_priv 6 67 56 67 1 : tunables 120 60 8 : slabdata 1 1 0 +cfq_io_context 4 28 136 28 1 : tunables 120 60 8 : slabdata 1 1 0 +cfq_queue 5 16 240 16 1 : tunables 120 60 8 : slabdata 1 1 0 +bsg_cmd 0 0 312 12 1 : tunables 54 27 8 : slabdata 0 0 0 +mqueue_inode_cache 1 4 896 4 1 : tunables 54 27 8 : slabdata 1 1 0 +isofs_inode_cache 0 0 640 6 1 : tunables 54 27 8 : slabdata 0 0 0 +hugetlbfs_inode_cache 1 6 608 6 1 : tunables 54 27 8 : slabdata 1 1 0 +dquot 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +kioctx 0 0 384 10 1 : tunables 54 27 8 : slabdata 0 0 0 +kiocb 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +inotify_event_private_data 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +inotify_inode_mark_entry 186 204 112 34 1 : tunables 120 60 8 : slabdata 6 6 0 +dnotify_mark_entry 1 34 112 34 1 : tunables 120 60 8 : slabdata 1 1 0 +dnotify_struct 1 112 32 112 1 : tunables 120 60 8 : slabdata 1 1 0 +fasync_cache 6 144 24 144 1 : tunables 120 60 8 : slabdata 1 1 0 +khugepaged_mm_slot 83 92 40 92 1 : tunables 120 60 8 : slabdata 1 1 0 +ksm_mm_slot 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +ksm_stable_node 0 0 40 92 1 : tunables 120 60 8 : slabdata 0 0 0 +ksm_rmap_item 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +utrace_engine 0 0 56 67 1 : tunables 120 60 8 : slabdata 0 0 0 +utrace 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +pid_namespace 0 0 2120 3 2 : tunables 24 12 8 : slabdata 0 0 0 +nsproxy 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +posix_timers_cache 0 0 176 22 1 : tunables 120 60 8 : slabdata 0 0 0 +uid_cache 10 60 128 30 1 : tunables 120 60 8 : slabdata 2 2 0 +UNIX 459 480 768 5 1 : tunables 54 27 8 : slabdata 96 96 0 +ip_mrt_cache 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +UDP-Lite 0 0 832 9 2 : tunables 54 27 8 : slabdata 0 0 0 +tcp_bind_bucket 15 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0 +inet_peer_cache 4 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0 +secpath_cache 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +xfrm_dst_cache 0 0 384 10 1 : tunables 54 27 8 : slabdata 0 0 0 +ip_fib_alias 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +ip_fib_hash 10 106 72 53 1 : tunables 120 60 8 : slabdata 2 2 0 +ip_dst_cache 29 50 384 10 1 : tunables 54 27 8 : slabdata 5 5 0 +arp_cache 4 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +RAW 65 72 832 9 2 : tunables 54 27 8 : slabdata 8 8 0 +UDP 6 18 832 9 2 : tunables 54 27 8 : slabdata 2 2 0 +tw_sock_TCP 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +request_sock_TCP 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +TCP 20 24 1664 4 2 : tunables 24 12 8 : slabdata 6 6 0 +eventpoll_pwq 126 212 72 53 1 : tunables 120 60 8 : slabdata 4 4 0 +eventpoll_epi 126 180 128 30 1 : tunables 120 60 8 : slabdata 6 6 0 +sgpool-128 2 2 4096 1 1 : tunables 24 12 8 : slabdata 2 2 0 +sgpool-64 2 2 2048 2 1 : tunables 24 12 8 : slabdata 1 1 0 +sgpool-32 2 4 1024 4 1 : tunables 54 27 8 : slabdata 1 1 0 +sgpool-16 2 8 512 8 1 : tunables 54 27 8 : slabdata 1 1 0 +sgpool-8 15 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +scsi_data_buffer 0 0 24 144 1 : tunables 120 60 8 : slabdata 0 0 0 +blkdev_integrity 0 0 112 34 1 : tunables 120 60 8 : slabdata 0 0 0 +blkdev_queue 29 30 2856 2 2 : tunables 24 12 8 : slabdata 15 15 0 +blkdev_requests 42 66 352 11 1 : tunables 54 27 8 : slabdata 5 6 0 +blkdev_ioc 5 48 80 48 1 : tunables 120 60 8 : slabdata 1 1 0 +fsnotify_event_holder 0 0 24 144 1 : tunables 120 60 8 : slabdata 0 0 0 +fsnotify_event 0 0 104 37 1 : tunables 120 60 8 : slabdata 0 0 0 +bio-0 180 180 192 20 1 : tunables 120 60 8 : slabdata 9 9 0 +biovec-256 66 66 4096 1 1 : tunables 24 12 8 : slabdata 66 66 0 +biovec-128 0 0 2048 2 1 : tunables 24 12 8 : slabdata 0 0 0 +biovec-64 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +biovec-16 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +bip-256 2 2 4224 1 2 : tunables 8 4 0 : slabdata 2 2 0 +bip-128 0 0 2176 3 2 : tunables 24 12 8 : slabdata 0 0 0 +bip-64 0 0 1152 7 2 : tunables 24 12 8 : slabdata 0 0 0 +bip-16 0 0 384 10 1 : tunables 54 27 8 : slabdata 0 0 0 +bip-4 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +bip-1 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +sock_inode_cache 667 685 704 5 1 : tunables 54 27 8 : slabdata 137 137 0 +skbuff_fclone_cache 7 7 512 7 1 : tunables 54 27 8 : slabdata 1 1 0 +skbuff_head_cache 302 450 256 15 1 : tunables 120 60 8 : slabdata 30 30 0 +file_lock_cache 38 44 176 22 1 : tunables 120 60 8 : slabdata 2 2 0 +net_namespace 0 0 2112 3 2 : tunables 24 12 8 : slabdata 0 0 0 +shmem_inode_cache 774 775 800 5 1 : tunables 54 27 8 : slabdata 155 155 0 +Acpi-Operand 4563 4664 72 53 1 : tunables 120 60 8 : slabdata 88 88 0 +Acpi-ParseExt 0 0 72 53 1 : tunables 120 60 8 : slabdata 0 0 0 +Acpi-Parse 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +Acpi-State 0 0 80 48 1 : tunables 120 60 8 : slabdata 0 0 0 +Acpi-Namespace 3311 3312 40 92 1 : tunables 120 60 8 : slabdata 36 36 0 +task_delay_info 332 340 112 34 1 : tunables 120 60 8 : slabdata 10 10 0 +taskstats 5 12 328 12 1 : tunables 54 27 8 : slabdata 1 1 0 +proc_inode_cache 1008 1008 640 6 1 : tunables 54 27 8 : slabdata 168 168 0 +sigqueue 35 48 160 24 1 : tunables 120 60 8 : slabdata 2 2 0 +bdev_cache 32 36 832 4 1 : tunables 54 27 8 : slabdata 9 9 0 +sysfs_dir_cache 11356 11367 144 27 1 : tunables 120 60 8 : slabdata 421 421 0 +mnt_cache 37 45 256 15 1 : tunables 120 60 8 : slabdata 3 3 0 +filp 4614 4700 192 20 1 : tunables 120 60 8 : slabdata 235 235 60 +inode_cache 6883 7308 592 6 1 : tunables 54 27 8 : slabdata 1218 1218 0 +dentry 61000 63960 192 20 1 : tunables 120 60 8 : slabdata 3198 3198 0 +names_cache 26 26 4096 1 1 : tunables 24 12 8 : slabdata 26 26 0 +avc_node 518 1239 64 59 1 : tunables 120 60 8 : slabdata 21 21 0 +selinux_inode_security 84086 86072 72 53 1 : tunables 120 60 8 : slabdata 1624 1624 0 +radix_tree_node 11552 11781 560 7 1 : tunables 54 27 8 : slabdata 1683 1683 0 +key_jar 11 20 192 20 1 : tunables 120 60 8 : slabdata 1 1 0 +buffer_head 220986 230214 104 37 1 : tunables 120 60 8 : slabdata 6222 6222 0 +vm_area_struct 12932 13034 200 19 1 : tunables 120 60 8 : slabdata 686 686 60 +mm_struct 145 145 1408 5 2 : tunables 24 12 8 : slabdata 29 29 0 +fs_cache 137 177 64 59 1 : tunables 120 60 8 : slabdata 3 3 0 +files_cache 162 165 704 11 2 : tunables 54 27 8 : slabdata 15 15 0 +signal_cache 204 204 1024 4 1 : tunables 54 27 8 : slabdata 51 51 0 +sighand_cache 195 195 2112 3 2 : tunables 24 12 8 : slabdata 65 65 0 +task_xstate 232 232 512 8 1 : tunables 54 27 8 : slabdata 29 29 0 +task_struct 303 303 2656 3 2 : tunables 24 12 8 : slabdata 101 101 0 +cred_jar 580 580 192 20 1 : tunables 120 60 8 : slabdata 29 29 0 +anon_vma_chain 7844 8162 48 77 1 : tunables 120 60 8 : slabdata 106 106 60 +anon_vma 5773 5888 40 92 1 : tunables 120 60 8 : slabdata 64 64 60 +pid 322 330 128 30 1 : tunables 120 60 8 : slabdata 11 11 0 +shared_policy_node 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +numa_policy 1 28 136 28 1 : tunables 120 60 8 : slabdata 1 1 0 +idr_layer_cache 428 434 544 7 1 : tunables 54 27 8 : slabdata 62 62 0 +size-4194304(DMA) 0 0 4194304 1 1024 : tunables 1 1 0 : slabdata 0 0 0 +size-4194304 0 0 4194304 1 1024 : tunables 1 1 0 : slabdata 0 0 0 +size-2097152(DMA) 0 0 2097152 1 512 : tunables 1 1 0 : slabdata 0 0 0 +size-2097152 0 0 2097152 1 512 : tunables 1 1 0 : slabdata 0 0 0 +size-1048576(DMA) 0 0 1048576 1 256 : tunables 1 1 0 : slabdata 0 0 0 +size-1048576 0 0 1048576 1 256 : tunables 1 1 0 : slabdata 0 0 0 +size-524288(DMA) 0 0 524288 1 128 : tunables 1 1 0 : slabdata 0 0 0 +size-524288 0 0 524288 1 128 : tunables 1 1 0 : slabdata 0 0 0 +size-262144(DMA) 0 0 262144 1 64 : tunables 1 1 0 : slabdata 0 0 0 +size-262144 0 0 262144 1 64 : tunables 1 1 0 : slabdata 0 0 0 +size-131072(DMA) 0 0 131072 1 32 : tunables 8 4 0 : slabdata 0 0 0 +size-131072 1 1 131072 1 32 : tunables 8 4 0 : slabdata 1 1 0 +size-65536(DMA) 0 0 65536 1 16 : tunables 8 4 0 : slabdata 0 0 0 +size-65536 2 2 65536 1 16 : tunables 8 4 0 : slabdata 2 2 0 +size-32768(DMA) 0 0 32768 1 8 : tunables 8 4 0 : slabdata 0 0 0 +size-32768 3 3 32768 1 8 : tunables 8 4 0 : slabdata 3 3 0 +size-16384(DMA) 0 0 16384 1 4 : tunables 8 4 0 : slabdata 0 0 0 +size-16384 11 11 16384 1 4 : tunables 8 4 0 : slabdata 11 11 0 +size-8192(DMA) 0 0 8192 1 2 : tunables 8 4 0 : slabdata 0 0 0 +size-8192 27 27 8192 1 2 : tunables 8 4 0 : slabdata 27 27 0 +size-4096(DMA) 0 0 4096 1 1 : tunables 24 12 8 : slabdata 0 0 0 +size-4096 425 425 4096 1 1 : tunables 24 12 8 : slabdata 425 425 0 +size-2048(DMA) 0 0 2048 2 1 : tunables 24 12 8 : slabdata 0 0 0 +size-2048 578 578 2048 2 1 : tunables 24 12 8 : slabdata 289 289 0 +size-1024(DMA) 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +size-1024 1304 1304 1024 4 1 : tunables 54 27 8 : slabdata 326 326 0 +size-512(DMA) 0 0 512 8 1 : tunables 54 27 8 : slabdata 0 0 0 +size-512 1123 1176 512 8 1 : tunables 54 27 8 : slabdata 147 147 0 +size-256(DMA) 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +size-256 870 870 256 15 1 : tunables 120 60 8 : slabdata 58 58 0 +size-192(DMA) 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +size-192 2119 2160 192 20 1 : tunables 120 60 8 : slabdata 108 108 0 +size-128(DMA) 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +size-64(DMA) 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +size-64 33003 40887 64 59 1 : tunables 120 60 8 : slabdata 693 693 0 +size-32(DMA) 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +size-128 3921 4800 128 30 1 : tunables 120 60 8 : slabdata 160 160 0 +size-32 332359 332976 32 112 1 : tunables 120 60 8 : slabdata 2973 2973 0 +kmem_cache 191 191 32896 1 16 : tunables 8 4 0 : slabdata 191 191 0 +Inter-| Receive | Transmit + face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed + lo:267102759 105357 0 0 0 0 0 0 267102759 105357 0 0 0 0 0 0 + eth0:1013756074 1354469 0 0 0 0 0 0 245526499 966773 0 0 0 0 0 0 + pan0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 diff --git a/test/aux-fixed/exim-ca/example.com/CA/pwdfile b/test/aux-fixed/exim-ca/example.com/CA/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/CA/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.com/CA/secmod.db b/test/aux-fixed/exim-ca/example.com/CA/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..c7f115bd68bc7da12b7a8cd053cac6ff48a39f80 GIT binary patch literal 16384 zcmeI&!Aiq07{Kw*O~wu~y?7G|c*srI0~C>Zk)jOd3)D6nWwjk`2YT=^yo%4{$)ikP zLo{tBIs^|M#*qI9A<38YOZq!UI=i8Wv_v)^MRx2^wnR2;S2yV{26nwkw41(Ja+~h5 z+ZUUwqux`ul}FdzXXWQ|AOZ*=fB*srAbzL2LcEnfB*srAbwSK5kxxu^V#=sUrd5(>^@@9k o|Ij}2>|OV5`w_qW-`hKZ00IagfB*srAbm$1DNwf{{R30 literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/expired1.example.com/ca_chain.pem b/test/aux-fixed/exim-ca/example.com/expired1.example.com/ca_chain.pem new file mode 100644 index 000000000..f8f92755b --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/expired1.example.com/ca_chain.pem @@ -0,0 +1,47 @@ +Bag Attributes + friendlyName: Signing Cert +subject=/O=example.com/CN=clica Signing Cert +issuer=/O=example.com/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAxWhcNMzgw +MTAxMTIzNDAxWjAzMRQwEgYDVQQKEwtleGFtcGxlLmNvbTEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALGUYGllRw9Y +7ATtT3iqwv3rnnpYYWaxGdamUYznYS6l8lAyHFOqfEktdHZ+bUyRVWsbvyx/a2St +u1vpZpkihvMCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLmNvbS9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EApouSZ4cX2rx+pZWcDHJH+KaCMpMa +ScrHO8bFSCWI02ckzoIxWfu1DMNO++EpyzrTgyaXoCROjvhdslwucMqAIg== +-----END CERTIFICATE----- +Bag Attributes + friendlyName: Certificate Authority +subject=/O=example.com/CN=clica CA +issuer=/O=example.com/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBaTCCAROgAwIBAgIBATANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAwWhcNMzgw +MTAxMTIzNDAwWjApMRQwEgYDVQQKEwtleGFtcGxlLmNvbTERMA8GA1UEAxMIY2xp +Y2EgQ0EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAxYR8NYQvEd7/e4MvOj9dh2+o +mnywT9ajMo1589DWt2z14ouRKhSZWlx4O4AicPZc6n4uvt7++t0tTHhmm5JIbwID +AQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjANBgkq +hkiG9w0BAQUFAANBALjVd1KMBadFJFIzTEspoPYxJvXKvLMclekQs5QY0lmmUj5+ +ugITEG6ywu3s+REUB+8Dj+ofQz3tgIm9NBpkfsA= +-----END CERTIFICATE----- +Bag Attributes + friendlyName: expired1.example.com + localKeyID: C3 70 0A 4C 75 DB 50 B7 1F 67 60 9C DC AD 17 A3 C0 65 5F FF +subject=/CN=expired1.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZzANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwMVoXDTEyMTIwMTEyMzQwMVowHzEdMBsGA1UEAxMUZXhwaXJlZDEuZXhhbXBs +ZS5jb20wXDANBgkqhkiG9w0BAQEFAANLADBIAkEAuhbGp8Jqy4UZdYGiPLl+q1m4 +dBdrY6689kqn5x5FUZ4PNl9ty9+mnC2Dx5WiYbrOybQZViM9lAIvGRI1GKsHdwID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +LmNvbS9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5jb20vMB8GA1UdEQQYMBaCFGV4cGlyZWQxLmV4YW1w +bGUuY29tMA0GCSqGSIb3DQEBBQUAA0EAkrXPLW+etluRGUilUcMsAWEZJ8Syu317 +kXvPuyjNVz3+lGo/4hzhehSusTzy4+22UgsBmgZpjG+uI8tNRmDnAQ== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/expired1.example.com/cert8.db b/test/aux-fixed/exim-ca/example.com/expired1.example.com/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..29784aef4d8e9c5d3f8c373416e03019e1071c50 GIT binary patch literal 65536 zcmeI*TTB#J9LMo9v&*_g5fS7fDyVoD_AIDraF>->D^{xoqgBLIf(xz!OJJ>dqly-5 zwQaDFR%F{wG5CH@bKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 z009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~ffpsK0*$$2FdOw!!)CBU}tAxdQM)pGbY2GV-1l0 zdaEJOoRRIyNRJ$wDEox?S!1nMX|=}2jgT@m#4qk;`Rrp`x=L$24aG+oCJLFPCW;fQ zmyKL)3AprR=_*USWA+;N7n_!SHRa;A*bf%p{_*1e>^oQ1l@1Nsn3`5NdPTpyyJ^>p zV!plf_`xsHlL|9G+mPf|4T?~<4U|#!_tZO3QJxsh(xe^qTkopfQEz{}&8TUZ8qYza zFeHitKP^gG?^87{DkW~x#32=Ttpo3zIlQM=`L%9)%0kc2tV~HLI;aMA%iVpf?#5pM zL7i?IKDr(;)?T+_?U4~Z=N26u>&*AKGBqxbGcs|ZXP!IX%mT;~l$)5YECp zSH5$uHKtKv2{B5DtakNlkP+72GTb|EP)nVgwZ#LbJM#-%?p)z3PCGugueE2`r`f~p zH*FQR0$X)_S$uW;i&|lTeh@$a0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY** z5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009L4zXH!P+dGAyme;P*_T+}l zw%RPH+=c*ev&^=&X=dA++O8a~Y%RULt89+TIo^N94P)Ju!X3vR{k~<%jP%T1VHYct z*Vm@UY`^tJY_F+1mQ9HEyj_$tsdU;g}W*4zwIOMF+Z+mN*; z1(SO#5Sy6pq2jf!sM-%`N80m zRmbMnyc@P~Yud2)T(o=3 zzFDPVN!yc;4_DH|27SN#(DJ3FOV1q|{KK2}$7S;!S9)Du5>&m*cI#^0zLd_&CX;Ku zySjhP>#xqKRa&eRrG2XfJnEp;HW&s01Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 z009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**S{L{m D$kWU; literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.chain.pem b/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.chain.pem new file mode 100644 index 000000000..fe5dcdf2f --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.chain.pem @@ -0,0 +1,29 @@ +Bag Attributes + friendlyName: expired1.example.com + localKeyID: C3 70 0A 4C 75 DB 50 B7 1F 67 60 9C DC AD 17 A3 C0 65 5F FF +subject=/CN=expired1.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZzANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwMVoXDTEyMTIwMTEyMzQwMVowHzEdMBsGA1UEAxMUZXhwaXJlZDEuZXhhbXBs +ZS5jb20wXDANBgkqhkiG9w0BAQEFAANLADBIAkEAuhbGp8Jqy4UZdYGiPLl+q1m4 +dBdrY6689kqn5x5FUZ4PNl9ty9+mnC2Dx5WiYbrOybQZViM9lAIvGRI1GKsHdwID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +LmNvbS9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5jb20vMB8GA1UdEQQYMBaCFGV4cGlyZWQxLmV4YW1w +bGUuY29tMA0GCSqGSIb3DQEBBQUAA0EAkrXPLW+etluRGUilUcMsAWEZJ8Syu317 +kXvPuyjNVz3+lGo/4hzhehSusTzy4+22UgsBmgZpjG+uI8tNRmDnAQ== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAxWhcNMzgw +MTAxMTIzNDAxWjAzMRQwEgYDVQQKEwtleGFtcGxlLmNvbTEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALGUYGllRw9Y +7ATtT3iqwv3rnnpYYWaxGdamUYznYS6l8lAyHFOqfEktdHZ+bUyRVWsbvyx/a2St +u1vpZpkihvMCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLmNvbS9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EApouSZ4cX2rx+pZWcDHJH+KaCMpMa +ScrHO8bFSCWI02ckzoIxWfu1DMNO++EpyzrTgyaXoCROjvhdslwucMqAIg== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.key b/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.key new file mode 100644 index 000000000..ecfb0cbc7 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.key @@ -0,0 +1,15 @@ +Bag Attributes + friendlyName: expired1.example.com + localKeyID: C3 70 0A 4C 75 DB 50 B7 1F 67 60 9C DC AD 17 A3 C0 65 5F FF +Key Attributes: +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBnjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQINZM2aHxF3EcCAggA +MBQGCCqGSIb3DQMHBAjc9XMhJPg/ZwSCAVicoTPaeGXGPJyPdhflErlI9EWbj0PH +bv8AchovLDfYq1Q4EJzkUG1XyelHNha+BS/zFxCcmtpdQtXedL/SdXsOyM99wdJH +tjpJyWxM3bysqDUdhv2g11KTG0M9L7RBtKmbQq0zcHf9oTZbABKSe4EzX6a9khJY +5bRVBSQPNtj3/5aAr0BOQQnythh0880FcYmvbFmZQNR12Cexc0+X0/aTaQ/LhM1y +8GlRBFXGACP+mrY4RfEk/EatcGmqn4JCVASF7Z7zu7JKsEskLDArF9nvVh2xN22n +DugUfQDRPph4ug2MyUcKNSZzGs+khWmS2TgPgUV0gr1tqS4Sqo+59NuZInyGSMRn +FeiFTSYcd+zmxinF20MCs+Y6fFasErs6/zdK5oeV8pMlTCX0/yky9Ye4kfth2oHl +UV+Rfe2Bo40wn6QkxuptagYdoDTJrMUCH9WL/ODRn4IA1Q== +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..d7ba6319e75b64f9bb6f6ffa7a26738c1cd95e37 GIT binary patch literal 725 zcmXqLV!Fu1$grS^>6Aee(=j$qZ8k<$R(1nMMwTX~?LeW;291{%niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#F*Z|fMMhUL8uVWDyS_Bl?@aP@5qwPB{Bhb4H%#I9+#aU0g?(KRj?>W(GDaU?|j-IudXQLCV zpSMZ>cyRS*{h$BybhmB2Y~;&y>&uEidGqd+FHx#u1Rx29l6~6oLdKC=4_6(iNOji%JaS#CefI(lAP#*Vw`U z7O;j<@8;d{WK@M&zI%Rsvtg(0T&wwB&9KPqJW$grS^X}dua(`GhKZ8k<$R(1nMMwTX~B|xDC295g{niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#F*Z|fMMi9WdlV6d4#K(ScF&v&dix{%DmKW@|#2PQ{7+O zi!tD3%PYQaW0SG4mpu@vr0QxN8D_#E#C%#Z z?!9|@QdQuxSMv3zpTNuDX(J+dfs4zeY z14dvNcrzGyFgY^pNZ=J^5O(wqe-)d(#caQy=7jgTv;OC>d1V*KV&i}$D`rl#5CX=9<4UiOCzeZTHuml5TYXx_;@9sq?{97q>47e9mwZ2} oI%}(>T*4%ps0K16TYybcN literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.ocsp.req b/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..37b83a66991ecf05f6c9df5d2b43c1e34f950be1 GIT binary patch literal 105 zcmV-v0G9tSXE0?jJ}^8mIxqH2QUEw1QG-g%$%6YH+4Rf L?80A_N9f*M;?*Qy literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..4a259407aad365a4de65591a3973ccc818ebd30a GIT binary patch literal 728 zcmXqLV!Fb`$grS^>8wE$(@8c?Z8k<$R(1nMMwTX~T|l9228~x2niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#F)NN3~Z!<0nl7S6C-m2%cup+T#PIj7A;gZP&AN7_=Sl@ zh(+McoEfLgOYJ7VITSzD{l&c)170>xtu~Lg@4SpaA2TpJGRRJ_*~#*H>8BZ!f)e<1 z?`KGS6@4|MR%Z6550_o~^`G25som)DpK<1@!ph7J2TR%br9vB|XGH!{YCgk0|L3yL z{R^5HI}Dl_TY$I$h_x0lGchtTF*2jsWMGUVETs)3Az>*52}@8gX6B_UIHwks7|4n9 zA_b;llsK=kg#j#V4Wr13AOn;zU<8JNH-mu(lOw~91YS`FVMp)qSFzb!%=Y_fPI#X? z>wgZLS9a0A`q1pUwQt@BUGzzMufk&<>v8)WYn8`m`?Hf}wyu9@6nT7u{%Iy=Mh3>k zS_T>hd_WJ$@-s62XJKJxVs9`I1MyWsd>#WXHV#N)W9CE)Az)lMuJrnNV!4!NW8a>> z)u&}Fe*I4K{^k~u9_aFR$@imLF3+p)Og~xU7-IhEGY`MN-A$i2XTmODZV36?>@@$Y^e=ukpLji5=Oaza^bUTiX2$&u0QT#PgpdZ%G{-62QE-4!R_kG~D`DhjUn5|Aoi z#^%#8)!U`>IVH(o)jC-7$9Tryc%$frS)o^ z5W+IRnI8lNX0@$hnWsMt?7=U|<=D<+9EZC)cq$Q|oW!^HS=gbg=mK7pePg*@*Xqxc znv0Sdi7bNq1+MFSU3lcXFf;Xf{sDET>Iz9*_-?)qO=Qb(Q9*D*26b1cx5;`Dx8jK@ zhY*`X27+6Zbl;Sr1LGxCRnM#--CMeA-6c>un1ab>6k?i9?fbgO--Pz812<0H)CM%DE=^o5&OgloIzUz z!>FZN^!(scDqm!p@y{Z}xra?^2kX6Hm}Yvo!N^0KsU_oBb8=Q-n&15xnSxEd0f+=) zGMtP!sv}OsN1Ycq*YoOfjF?LCa8Pf+##J`PVzVJ4i$O-j!wd5weI1_-{d4ui#|Sv z%ph{BhtBUZ2_@!Ij#mi(eNwm#@ruoS`xB=@djq{VaT!V_6OvLMhb?Mb@ z>RcmmnCnuN!UpPz?ooymJ1mkSWTd!k6k%r8uXj2=yP|b8EDR|&J1{seE7MO!Ein0f z4*n_0QPe7prNbVS&D_gccDy7KEMOaCz#reHKbzD;6|%^OuGXQy8KT?8O;jpxhDrmS zMjJP~Hg#UzcIkbR5OPdssL zAEwgF&_>?lK2Z{{T}N*-6A_I=++LCNwbISS5P}hpQ(94|$E=2j(3)SMxRdK3v5-aewPx$L=J=*88@6$m3r!>`FrJ6X zf`|s;J5I2N)N+-e(3&u-&&oC~y}z?5u2$Te)sB%t;gSCH*6S8xBl3qh zAnmUkB9~dbFH$xydKD53kU{B*QG#_8nwRkzas35W!0=;SF4DufNf@G z?r50%as2Ybj5fREmkCLz13gC>FnIQK!Ta;xPYq2hC5Bo;9|eguYX9^t9=jy7(vA`0 z4xGzhsMhl>wd{>)M<%iFbsG_EcjNW&V_~=CTuGVfFFqaoQZ_S%wuWG2>+bt;9y~tz z9P-{0sTtuT*?do@E89HQa3;He#*}t_ls!u08>sMKo0D8$Jy7+mVN~n3+IA_YN5|ik zCVJpIrS?ci%B689GUYOPdL-YjG zbEmp){-A=eBd7hbKao2Xfd=z}(d~!&&+>7C+)tBmZn*rlmdUl3K z^L3?0cXiv~3sP%dY&IxQ<PzoI+%+q$6Ur-ALd^o^U({xf*=#wU zbJO>e;`3UW2QjgyBKz8ZoES>RX%f-UnaW)EjxVGT1O(P;8w3VlsrCKmGyA<_j$vdl z{7_!yT|8iMUI2n9w6LF_%Y9H?+Y`Oibcm7cBI2+G5q4aAmRe%6IIAcq64k>wWAN*l H0l+^1Zm36b literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.pem b/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.pem new file mode 100644 index 000000000..d30bbe096 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: expired1.example.com + localKeyID: C3 70 0A 4C 75 DB 50 B7 1F 67 60 9C DC AD 17 A3 C0 65 5F FF +subject=/CN=expired1.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZzANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwMVoXDTEyMTIwMTEyMzQwMVowHzEdMBsGA1UEAxMUZXhwaXJlZDEuZXhhbXBs +ZS5jb20wXDANBgkqhkiG9w0BAQEFAANLADBIAkEAuhbGp8Jqy4UZdYGiPLl+q1m4 +dBdrY6689kqn5x5FUZ4PNl9ty9+mnC2Dx5WiYbrOybQZViM9lAIvGRI1GKsHdwID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +LmNvbS9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5jb20vMB8GA1UdEQQYMBaCFGV4cGlyZWQxLmV4YW1w +bGUuY29tMA0GCSqGSIb3DQEBBQUAA0EAkrXPLW+etluRGUilUcMsAWEZJ8Syu317 +kXvPuyjNVz3+lGo/4hzhehSusTzy4+22UgsBmgZpjG+uI8tNRmDnAQ== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.unlocked.key b/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.unlocked.key new file mode 100644 index 000000000..9754e14fe --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/expired1.example.com/expired1.example.com.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBOQIBAAJBALoWxqfCasuFGXWBojy5fqtZuHQXa2OuvPZKp+ceRVGeDzZfbcvf +ppwtg8eVomG6zsm0GVYjPZQCLxkSNRirB3cCAwEAAQJAbb0wuY21XP/I27ru6dCa +GoJ2fD+zXL2XQccU7P608kO6R9g73lx48QT21OGvLkKGA4J2U3qqvqJWKP580o3X +gQIhAN8A4PM0w3cLBnibnQcr+5TfhSUye/4AQcaqUQBnjQW5AiEA1Z+eWtugFdR3 +D6ntc4UdyXsO1DMDn6QyuyEyrJqUDq8CIGGfrtqJVLB+gRy3cuy60m3/0/fOu/0b ++6+Oy9sTeebxAiBK7m5RWHBSt+/7YpOTzcGhBrUw4aQHv0S8Nuzbdm0wqQIgYW0B +7KVyChX6OpKifrdrSK3Jp3iXP9pgNunxGNj1QbM= +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.com/expired1.example.com/key3.db b/test/aux-fixed/exim-ca/example.com/expired1.example.com/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..706f876a7b10c90d29187812336cc0f869c1993e GIT binary patch literal 16384 zcmeI$Ye>^k6aeu1cXJNg`pvd^8`KvGRcx>R1Yu`HE8iZPS^v**5b*=3_YQ zG0H3~3?D06GOWx;ZI$6`DWX)MQ9^|VK`$dpCz0i>4}A_2gLB|=4)gkiznk9^agqd{RadHfB*=900@8p z2!H?xfB*=9z)}z(A*Qr2FIy><1P4e9iQGK7G(fD#ML`vqHpqvv%ug%S&d@QMJw^)R zkX<|^l)j_Qcv@7`XyV>DI;y-Sk8Uk0C6*du;|Y(1TacIrn*` z?hg^|?w_JIeH!cDayn2~l3`+t7`H#0hk5G-&j)!=(@*SkO@G~;_HE-0cUMK+cFi6m zzvp;He8|CzllD0uy=Ue^6T|wa9k*{$hhnW~w{1Nf5=LB5Gk0*wswg+ZvzSMI{^MVE zh!SFqx-OHtZKG4MQ>QG+?xRI~U(OQSU!e@qxXFsqok~ets!ypX@_n|$J4=m%ev~^f zGS*h!Vp&T>cxL&l95&~3WzPMrlkJKtR%+{mt|)U@1!7YW!aRlwhCk1GiyxzuNs|yOmpUd zMXF<;8UOC7;iO^3v?E=&h69@8dxcDadB)|M|44*S%y5;VjwP6guXa433IA;Ma=O^# zp$s>(EQX$gLzSHTa(%ezm@)N^nw=xQes5Z2c(W>cS3SNdJ$LBk)k}QM!}EH=JTlnM zNm>(e&MuI%BGlFBP(UruOnl|mwGX@ZpyWhcOWN|$n(-{T;s7D%s|dN8GziWcNwrzzts6vz_0>{c zbeG&dyIk4Inld)t+Vy)jelHgyfB*srAbyvt?72`BA8~e?S$!6tI+1f zAh)Av;cKlX_U3Ccv*9!~zOMU@xz=hF2jiKq=9vi!Tb-&`liu1nbwU68X>}@c=Y4Lu zN+&isv$HUdvLZ^8a;5$c|Gs(ZyVoDP_|bm*;f?} E55kH}5&!@I literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/expired2.example.com/ca_chain.pem b/test/aux-fixed/exim-ca/example.com/expired2.example.com/ca_chain.pem new file mode 100644 index 000000000..cb3f97569 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/expired2.example.com/ca_chain.pem @@ -0,0 +1,47 @@ +Bag Attributes + friendlyName: Signing Cert +subject=/O=example.com/CN=clica Signing Cert +issuer=/O=example.com/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAxWhcNMzgw +MTAxMTIzNDAxWjAzMRQwEgYDVQQKEwtleGFtcGxlLmNvbTEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALGUYGllRw9Y +7ATtT3iqwv3rnnpYYWaxGdamUYznYS6l8lAyHFOqfEktdHZ+bUyRVWsbvyx/a2St +u1vpZpkihvMCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLmNvbS9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EApouSZ4cX2rx+pZWcDHJH+KaCMpMa +ScrHO8bFSCWI02ckzoIxWfu1DMNO++EpyzrTgyaXoCROjvhdslwucMqAIg== +-----END CERTIFICATE----- +Bag Attributes + friendlyName: Certificate Authority +subject=/O=example.com/CN=clica CA +issuer=/O=example.com/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBaTCCAROgAwIBAgIBATANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAwWhcNMzgw +MTAxMTIzNDAwWjApMRQwEgYDVQQKEwtleGFtcGxlLmNvbTERMA8GA1UEAxMIY2xp +Y2EgQ0EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAxYR8NYQvEd7/e4MvOj9dh2+o +mnywT9ajMo1589DWt2z14ouRKhSZWlx4O4AicPZc6n4uvt7++t0tTHhmm5JIbwID +AQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjANBgkq +hkiG9w0BAQUFAANBALjVd1KMBadFJFIzTEspoPYxJvXKvLMclekQs5QY0lmmUj5+ +ugITEG6ywu3s+REUB+8Dj+ofQz3tgIm9NBpkfsA= +-----END CERTIFICATE----- +Bag Attributes + friendlyName: expired2.example.com + localKeyID: 00 5E 8C 89 32 69 66 73 D9 E7 D3 9C E8 6A 72 27 1D C2 65 87 +subject=/CN=expired2.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBTCCAa+gAwIBAgICAMswDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5jb20xGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDJaFw0xMjEyMDExMjM0MDJaMB8xHTAbBgNVBAMTFGV4cGlyZWQyLmV4YW1w +bGUuY29tMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANs6ryDCjUepqaS5l0ZmpJ3m +bU0/nDE43cIfDCU+70Jjvf4rxfiQu1N1iiTO2IdRcxai/STBGxpaJRvo/G5l778C +AwEAAaOBwDCBvTAOBgNVHQ8BAf8EBAMCBPAwIAYDVR0lAQH/BBYwFAYIKwYBBQUH +AwEGCCsGAQUFBwMCMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwuZXhhbXBs +ZS5jb20vbGF0ZXN0LmNybDA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0 +dHA6Ly9vc2NwL2V4YW1wbGUuY29tLzAfBgNVHREEGDAWghRleHBpcmVkMi5leGFt +cGxlLmNvbTANBgkqhkiG9w0BAQUFAANBABTJbEBMPo/NbiMz+shKPbN+T+oAoneT +mb1n+3cM5I3RGkkzF8mYDyamimNn+T8GKWdVkiM/Jov1kv+KY5Twg+U= +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/expired2.example.com/cert8.db b/test/aux-fixed/exim-ca/example.com/expired2.example.com/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..1f5daa20e8eaafc01c2276e0527cf57a1f9ef716 GIT binary patch literal 65536 zcmeI*e@xVM9LMp`_j|{A5`+i>f(jx~_=Ef0p^G8MNv^~sO_@yzSL{5_oBSG_iD{(h zu>6sUI<>She_-0m)U_-njb`~{xzgpDO}Boh>2w+XOzHdOFoAFeb1vKS%f9=5?{i=7 z^Z7jP^ZxVoIbrINCxlRiFdh+Nn06~36hhH1`YFuKH`@D64Th#`(_6w{zh6=G;t$$Y zKlEqx^PV4O-+1nMzjTNI0tg_000IagfB*srAb$Usxq{#BV(mjV^V&ririYpCpQGK@F+hdkga&nqk`a3wj53$4L2 zNN+WSn4JY4XI{+k4B00<&}y?b`Tj1n?a%@F(M z%^EV#5`408=3GmvW77QMw_cz1-k4+SZHs4I`105X1r6UXT-rZ$bxv;i(Alvi7jsWn zBz=7H#?=#pvdZ({sLm`_4T@0KC&;*_IrR=vlt!ajnzV~P^#`>X^$yb8jGBh2(@`xi7YsaNme58hSE81Rv_RN*w z&@Sf;OHM}*x1XK;O5Nbd$rXEtyGp&De2vTNipiMfol;!t@y-xh&;MT8to=;=fDSyb zw%@1OAcP_Ug~;}}i#$c{82vFJ1`45e;KL0v`8LZVO7`?EkM6$Z(XtzT3Vmg?wYQA& zJrn9GFY%PRCfkx)tT45`Mq$=A4|v*DTIMM(68>VpW37FrJ=Pv-Kc4n(+Oui4w8GTv z)WX!ewZj0Pg8%{uAb`;f$2@!Ikq`8t+q)DcOXIA zCNynr9h$c0bShvgZx^55w){DdYedk5Gsd%H%D2>C|Lx5eCgkOB>v^np?4n=tk~aSS zl&x3xmRTbQd7rN+%vw5rYSf;AFHN2N&aP)p<*$ydy5NgX=g0~Fh)U}b@z!x_A#HkF zv{6ed%ZF;>Yx-67o#OSDq*^S_(t?&rUrT|Ohc5FbY0YgQwa9ht!fN;Y@Z-BHHm+C` zP&(prZKZ8lQpy|JI1&5dKsqwsa-`6S*iMI^|IAhFRIpQn_UJv6C-a^IyS9zwCx9M&D#&ya_%_9 z+m^|}7mwJydBcY*AJ5;g_UFPU9c!#9C+edE;?vJP>a4plVBh7}c4bdn5O?^S z`D4q%)?JVLBq}l|KI+#$i(KdS_{wC?UOA_(b)gu~%NV^V;`KcS!epq)Jiw&wve3n# z{C%f(s%!?|{C`C;J}kBU4Q{@cN>xO2)fJaHODrt{_7)kfk0sa`A;T)$jo`QWmb7XN zJy0+#D}BiqMg5Ym?tj9*qhicyv2OaZ)phP`(*u57{8i-0VA%dg$>n>3!KZ(&;6<0b*OZ55njJ9cH3Z(2q1s}0tg_000IagfB*srAb +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQI0nrN9i220lwCAggA +MBQGCCqGSIb3DQMHBAjYbPQkuir8nQSCAWANYVbKcEW9iaRzdj6AmMMZw4wnklZI +rR+R/Eaz92xDWHLv9Qo03JK2OoGgkhE3QvyNxP7Sm69hgErN202M1s7CW66HAt60 +T0XmvbZoXYkn3iPzi6Txi1GQnzo7gfd1S0phD/4q+Tq38nRzJjvHjsL1ebjiFZ2y +t5cF+gW7+3LEKT/s0K/WpS6QKTgl/W5iV09Tix1eOPckv7z4Cs2fiurohPocUTFa +B/hdKTun4MwmcchFrgjRda+jz/P42xtgaSmhIETD+C3jnbdEZWFY4xYijyffEUR0 +gUHKH6UPxqoJyeL8ziQmz2jc4j1glnedslHjS+fKlLCU1QKYbhgCcRB4tqILxd9M +e3/QQksgTFZtGymqPuwPMngcR2Om+E3f0UJnCXcaINJp971l971H/yhieYjxQua4 +8NNKVdz6EzYa/46Gv77Nu7+OQ0zGhMowpjGS4kTE9qOQ3udrdL2kFYJm +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..5690dfa9a2d53bef4c9ec12797f7ff84710ce183 GIT binary patch literal 726 zcmXqLV!Fh|$grS^>9j!;({VOVZ8k<$R(1nMMwTX~9YCQi291{&niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#KdsAi2=jR1%gl^pj}XF7AhMk8ptDj!o(uPA`s#7vF)o1 z|8qW90})rzer^L^HcqWJkGAi;j6nY~Fgr5LT6m^%hLncKR>kdiPxNk3otY`xnz&0j z+_7@e?hm#`c5|1UGn6=R_Mf->aS zaRU%*EnsG1WMX1uMzhJl7)MA-8%RPzQV0@~pg_#bOIL7CEh;gP6X!(=O2a5|USkUb zSjZYikrO=zF~}}s1cre(gMkN=Bg2jaUQq^NNAK`gvDsV9_WNm0c%M7#e-4{hcG183 z(CoUkZ{7!8^htWJ!ebumar+!=mB(lMvy)}Eu77A0d3=NZX(nby2FAr&1{wx@Ko80C zGcx{XVPR%sZ!i!8@l`>59s@2m4oFgC=0tV}BrY6RdVM^xTuQUCZ%^Oq(=ryney4eV ybBjn1ba}hv`%x{I=hb(npR92VG5_?Lhu`1srq7!*VV5sAg#2xGn!mN?-a7#K5#2xl literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.ocsp.good.resp b/test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.ocsp.good.resp new file mode 100644 index 0000000000000000000000000000000000000000..db5b8e0a36a9988f421254fbea4516b4bf12533d GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXP)smrb{u65pSc`2ZzGrn``??bxoEF$0d5{^Ey zFJ@cy|K^Qi#KdsAi2=jRg~|qs2J#4JGqDJ<2t>GiZ2RiM|D4a&K*UwF zpWA?!jZ>@5qwPB{BhYgU%#IAw>(rK&Upm!mc=319vgQc&r8hXEH)~B-{Ay4p`dfw} zpm$02-bvTZHp|anQq^XwpRTUbdT-9dGpl(IJPq5p{EyRuCdLkfCdL*ZZUADf1 zK1uIYc+6uxZl7bV^7w3jcCyUY^$(3Ak8jXF&BV;ez_?h;K*N9!=pk8tM#ldvEX+*o z4F+N$zAA{%W5C760ZCWPoXGBg#D(KZua75|OKCRt?de;6TE^nn?=_>Bw-46F?}*;uvtn3<$l8CXP)smrb{u65pSc`2ZzGrn``??bxoEF$0d5{^Ey zFJ@cy|K^Qi#KdsAi2=jRg~|qs2J#4JGqDJ<2t>GiZ2RiM|D4a&K*UwF zpWA?!jZ>@5qwPB{BhYgU%#IAw>(rK&Upm!mc=319vgQc&r8hXEH)~B-{Ay4p`dfw} zpm$02-bvTZHp|anQq^XwpRTUbdT-9dGpl(IJPq5p{EyRuCdLkfCdL*ZZUADf1 zK1uIYc+6uxZl7bV^7w3jcCyUY^$(3Ak8jXF&BV;ez_?h;K*N9!=pk8tM#ldvEX+*o z4F+N$zAA{%W5C760ZCWPoXGBg#D(KZua75|OKCRt?de;6TE^nn?=-0v*8ZgNdHa-ZXx<&x_X2~BPZWe3|x&B3A~CUb8_q;goM za!oE7=b)$vp>;$e)lcVlJHO}oy??yV`+T0~egAns&-2BSK|moa83Na$I#M_H0--=A zS)B|{hiziX{|AGh*mRH(HXZmKvgcnLq9Q;LGaX3Zg_p4E5Rrf5-Lq&gf`SmOnx$R0 zmM#ab-MAWt1c9K#;B;Vc>QBpFAY+m~_)iMTGC!aXHuSQjW^zpFp26GWTy)Rnajjp2 zD(YtQDkGu$O_F`Xp7C((bjN&NAT-FVWA+sU)Zn-LvdU@1i(uA(Vm zU5QICdsX+&|FrDNP^}OW`LyqhJ`;0$3Q(VO7SFan3`MvO9^nJq)jvA!z(m!0jWFTc z1A1&Ian<>a5w#*@{-@YxhbYRemmCo4osOf?Hs8{rb2txVN=ZjHlpowlp#$&O;?Zytpy&PhDWTe~^O^%u72Esqc4N4oW%Sg;&QJT;0r{`yplCMdBjA1`? zXBJ~jyq69UNC5;w{b@ zkiqMD>R032V7_-qt>#mTFRy5RI7w2dJ@1WasObef(UHunnwCt&Fa|bF$>(`;sxG}r zC7rlHtjT|#3P<6z6g2@S0ZD)uKm;ImcM1g<0QCMMA%N&z8nrv?0Zsr&fM~4Re-|Zj zXfO&8csbi3A}sEYh36%Ur(^dkbe*ID{;Izl0%7h70|Em6&Vc_T1muShcY!Hg3MCy8 zGj73Pd#7(!KZIcJ3I~Z<8*L9gt(Zi9&@N;&rKN08rP$Ky6E~EG4 znv^nzFbNrvrjN_g$_%TP*g3UY%Oy>jgzgs&uS`3+CVeE!;Kl9<3_hzX6c!>#v6bvX7;5KRsnX(LtRs-~l`8?8GRmkleve&#oSR z?6(@~tQ42%WjNB9NR2>(S(%$n&2lvd_{HAsHakBTe`~9^%qc|8Wr-DySji=mV-8HR zs7(Fh!J<--Zm|#XU~lRdA}cxJqN!B|lYrrUwJEJv>O0K&O>Sa_h^E!bS6I;XbDFA! z!$lQ!gz8q{<(j=J*z~l(bt9T>YYLmBi=H33hCC7J`=BUGpVNv zJR z6)R}l8Dj2<0xJX9#KBEK*NZ(ZO|HAp;W%rEK6?mRV`v`8|XPHW1(!(#~+ zz^M3KFIFmmG%;a4CH_Zpgpan}8z6G^4QzbxGpE|o>UZ59+2P)v@AqNI9w+X-_Mu0f znW!1CQu21A_<8XMw{_w|DMIhB;^y8>KC97covBMg1#yIAw_mWIb_INDL`dGo^{bEc z&-k31kUIUsK=N#y!oknq9g3QTAN^KWPu&SA9d~`sR8>R$A%_*T`{CO9C#~Vm6L?Xlp*4Fy&I zJP7Ym&|@qgnY^#6yxPu8r=9Ti38BKUzCS4b^GrPKvLRklBP+=KXIhPlylWirLkB@A zZ(MpX%&s%HC|tWLW^uJrG_YSYAIzPTdd2PRy}39oDQPNRh9?yb>r^O>teY=(*f4PR zG5dcCL#Jq+7t$oYj&n{yAI;B|@a81vPMtN$Z~)rEgv#ImclFPdUsijtr>=0squ(^f zofMyFspr3a(0F)Qt~JZ&3oXof70@w8cfAe?*{3vZ?CUoMdf$9n$soi)>g4piYw`RR`^Qyg!n>Tb% z=_>TgDz59hvcH_|F*gKlobfxnFah*|E3I1YT+~D#`3@B<>xkXD4fj>^#ryE=H0oMx z9vC|cfBc2@VE8F}oXR!s5Y=dmst4&B+vsgw zM9MtSJ+Kr!`sN(y>_s;3lKHh|{74eI>YCU?$vWT1=hG0TZvB$kNR!b5LqD74E_bnd zxsszrB5|Z5+2cqJnO1o5NiHM7$*=m`x(vRGiqHkDrM^CBOZ+afc71mK@ubr4sJ+vX zm8E`0kJ#$NP8yFW%yl_tmWjYLlZj{P^j@8t_c!E^vGnfh|LUSj!|2PKy%_2a?)4YN zrY*T_e$8{X1v5$m9M(6MS_-2AkEkEBQR`&4*&i%y+BEbP*K0=9eyRuYLcW4weOux0 z&hftd^3O2)d&in#Rj_b~u(p^GNLCmCMip3k^@fz^<#KUR3Kk2Si-MMD2`~aJc%HIA UxNSOoM(VlsbO`51m;nI)0Jl6hcmMzZ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.pem b/test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.pem new file mode 100644 index 000000000..91a46f95a --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: expired2.example.com + localKeyID: 00 5E 8C 89 32 69 66 73 D9 E7 D3 9C E8 6A 72 27 1D C2 65 87 +subject=/CN=expired2.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBTCCAa+gAwIBAgICAMswDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5jb20xGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDJaFw0xMjEyMDExMjM0MDJaMB8xHTAbBgNVBAMTFGV4cGlyZWQyLmV4YW1w +bGUuY29tMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANs6ryDCjUepqaS5l0ZmpJ3m +bU0/nDE43cIfDCU+70Jjvf4rxfiQu1N1iiTO2IdRcxai/STBGxpaJRvo/G5l778C +AwEAAaOBwDCBvTAOBgNVHQ8BAf8EBAMCBPAwIAYDVR0lAQH/BBYwFAYIKwYBBQUH +AwEGCCsGAQUFBwMCMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwuZXhhbXBs +ZS5jb20vbGF0ZXN0LmNybDA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0 +dHA6Ly9vc2NwL2V4YW1wbGUuY29tLzAfBgNVHREEGDAWghRleHBpcmVkMi5leGFt +cGxlLmNvbTANBgkqhkiG9w0BAQUFAANBABTJbEBMPo/NbiMz+shKPbN+T+oAoneT +mb1n+3cM5I3RGkkzF8mYDyamimNn+T8GKWdVkiM/Jov1kv+KY5Twg+U= +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.unlocked.key b/test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.unlocked.key new file mode 100644 index 000000000..cc0620beb --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/expired2.example.com/expired2.example.com.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBOgIBAAJBANs6ryDCjUepqaS5l0ZmpJ3mbU0/nDE43cIfDCU+70Jjvf4rxfiQ +u1N1iiTO2IdRcxai/STBGxpaJRvo/G5l778CAwEAAQJAads7RulKSMkuxgBrgC39 +3NSwAHXvmIDp61sMhUuPQhF8kxF9IistHoa4TBW3tdSVepBSDoMk0Ote+0UgO3wK +SQIhAPC8xBwjNC+gpnaxOvz2iLGbVwISPgM/TMaa+goBJ3o1AiEA6SDVyZi34Gia +W0YYzmQaJv2VcmGYh0JQ+diJT7qaoKMCIQCfZy6nvvu4KbTv1MzNYWUDzWsgePnM +5qYsv8OeykLcnQIgU4JDkrd2Bpjx0ghGEoihJZ5ozlRPgwQqZZU/eqPph+kCIBAd +MOImezJcizVRRG9PuyxuSvwLlPqjvFKnw2ixRkuW +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.com/expired2.example.com/key3.db b/test/aux-fixed/exim-ca/example.com/expired2.example.com/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..9bce6fa62c6f72b510a64a3a2eb1df8d8ecea7d8 GIT binary patch literal 16384 zcmeI$`AgGb7y$71yG@(dW_YF2<(!nJc$Ft+S}iRLwM>7`nt* zQJWo0NlBQ@;aOHHW*%7J(S?zjcu=N!tj+qNKOhX@dEnuBc;6SEm(OqSi!_aJgb)EC z(f~sGsut-YgsF-;5&2J}+FxHFuGjS~L{j&{#H^31st)xTb#8c&f8S@r=fXe`009sH z0T2KI5C8!X009sH0T9?M0-9)vx=8&(l~HS`mDB=NDj`4s1V8`;KmY_l00ck)1V8`; zKmY_bM&P@dfpJHUdwp<3ftTBd*)x4jqO=$eHwx$23UE#`(Ga6WN#=T=*7DuvdfFId zLY%EQc@^nc7alA8p@->eV8s3&+2nHhVXus9$@C;kP7@Co2-3LxXj@h+n-xzCVeD33|_s zpR@9}FP;?1Nuq{a2{YUElv7h!L^Qo_5HF9?l64!%b3#o!l_s*$1JqoT^k)pGjtbSQ z6mzqve%|O(>Jn~KnDy`^?Yy$zd{5-wgvj*1c5b7-+4L>D?5`_Zi~9)03j$IV$_Na= zn3J(%_kKPuTe$sp+(=oWkZP?}r7}}9GvsY0u0ziH8NE#|K1mM3uI+IFEp#7Gvd0mt z!QB+Hv^b(+UakzE_0{PNZN9?GXS}~0X1d5A!$v< zB-_RFTj;mBG#%Qd(>La7D!TsZH5UAotd53702rgO1O5u8$D`SMLspukwXYT0gX7EU++ypqVCXHq)$ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/expired2.example.com/pwdfile b/test/aux-fixed/exim-ca/example.com/expired2.example.com/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/expired2.example.com/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.com/expired2.example.com/secmod.db b/test/aux-fixed/exim-ca/example.com/expired2.example.com/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..a21c55fdbc25f7aeb550d8c5c73fb34ebb3aab64 GIT binary patch literal 16384 zcmeI&ze>YE9Ki9Pt&|Q@UED+t9I_Sa9vtc-MJd!5h`DPCO_PwOPzN8w-AC{#oQtoZ zPv9>0lB;MD#Hked9{jkw-~H}SK69jT7>GzsWcOL*zz$_kWXE=8NOLu?>s6v&_0^Iq zx=-$2Y_4o&O&J?+P4}LS-^+yvAb8WDNLROvFi7_19j5rsLNE(Vq>cw!!#L2BOT?wXXaUy8-3a~^I($2rX8jePlYBg z`nefKbKmpS*xY_irY4-E+V@=F);FFS#=&Unt68Rl!c?bvt4Vk599Pi$ews@~_Poz6 z*Xh_K=Vlt_QC380Qm(lF@E_`DzJ2|%jUVl|FMj`^A%Fk^2q1s}0tg_000IagfWUtj FSOU{#OcMYA literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/revoked1.example.com/ca_chain.pem b/test/aux-fixed/exim-ca/example.com/revoked1.example.com/ca_chain.pem new file mode 100644 index 000000000..ea68b9616 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/revoked1.example.com/ca_chain.pem @@ -0,0 +1,47 @@ +Bag Attributes + friendlyName: Signing Cert +subject=/O=example.com/CN=clica Signing Cert +issuer=/O=example.com/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAxWhcNMzgw +MTAxMTIzNDAxWjAzMRQwEgYDVQQKEwtleGFtcGxlLmNvbTEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALGUYGllRw9Y +7ATtT3iqwv3rnnpYYWaxGdamUYznYS6l8lAyHFOqfEktdHZ+bUyRVWsbvyx/a2St +u1vpZpkihvMCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLmNvbS9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EApouSZ4cX2rx+pZWcDHJH+KaCMpMa +ScrHO8bFSCWI02ckzoIxWfu1DMNO++EpyzrTgyaXoCROjvhdslwucMqAIg== +-----END CERTIFICATE----- +Bag Attributes + friendlyName: Certificate Authority +subject=/O=example.com/CN=clica CA +issuer=/O=example.com/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBaTCCAROgAwIBAgIBATANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAwWhcNMzgw +MTAxMTIzNDAwWjApMRQwEgYDVQQKEwtleGFtcGxlLmNvbTERMA8GA1UEAxMIY2xp +Y2EgQ0EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAxYR8NYQvEd7/e4MvOj9dh2+o +mnywT9ajMo1589DWt2z14ouRKhSZWlx4O4AicPZc6n4uvt7++t0tTHhmm5JIbwID +AQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjANBgkq +hkiG9w0BAQUFAANBALjVd1KMBadFJFIzTEspoPYxJvXKvLMclekQs5QY0lmmUj5+ +ugITEG6ywu3s+REUB+8Dj+ofQz3tgIm9NBpkfsA= +-----END CERTIFICATE----- +Bag Attributes + friendlyName: revoked1.example.com + localKeyID: 33 F8 A9 1F FC 62 68 49 CC C9 26 E0 24 22 40 40 B5 8E E6 07 +subject=/CN=revoked1.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZjANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwMVoXDTM4MDEwMTEyMzQwMVowHzEdMBsGA1UEAxMUcmV2b2tlZDEuZXhhbXBs +ZS5jb20wXDANBgkqhkiG9w0BAQEFAANLADBIAkEAtmfFkNpuJsl8xF0EINs9YniA +h0NKsf8Tt61IVzDsR5ULJOSpA7rcqmbniYuWJ7H1q8Rm5WTqjLs5zIKG+cR/lwID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +LmNvbS9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5jb20vMB8GA1UdEQQYMBaCFHJldm9rZWQxLmV4YW1w +bGUuY29tMA0GCSqGSIb3DQEBBQUAA0EAXzFO3fDq0RRzNgmAa9aorYUQUx1f6ifG +e9zS1V/Qua9HguY4FCm5NkLDSA46OA/NYEtnC3tDNF6PLSNi1Ww9NQ== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/revoked1.example.com/cert8.db b/test/aux-fixed/exim-ca/example.com/revoked1.example.com/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..d74575f49343b8c43ea1357a43fcf0427a420c1e GIT binary patch literal 65536 zcmeI*c}x^n9Ki86vkR^VB7%qq1r@P)z*|6LSC*BM2CPP_#;O#n2)pZsGqAN-5fR(9 zMqBHF*0yO#jA%8sMblcZ)+pN49`T5ncqKiJR8v#yRb%N4ixmjQLW%$MJDbVO&c2=Z z-sk=1&);u^Z?6m?gervbq!44ZQ_)=rMLX!bFg2cNzc*YkG#nd#5?%E3io8WXYDaz3 z+vxja-%Q@|JobL+5CH@bKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 z009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~fsPXBCT`jOupO|iwJx$w zw+^tLOQ=a$m*7k|W7%UlW2t9D009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{ z1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I~?K1oT%zzb!&Uh>|OU zWx3+g_P|Pms;H`>NI&1sLp`aUTYie-<0E90IY{>OHB2*h3G8Yw&d4puu}5d-=b8hg zzkbyaXv)lSWoCpYC&?#z`GpS*4r;`w0!WjEw@T`5!Oir# z(&*1G{`KdD5fh3X@2*MBR}G3#Hbu&ahB<`>DoVZ4Bz?7mKK1U}j6(hOYer4Ox9J!( z3PY0k?DWf1R{CstCSpq5gz-_8H_eeZj_u#ozv6O_UF$+l&a9e}Sh`mY?2)(g(A6t< z0)jgIW>{4hmTbLRw){YR->lMu$@W6G%b{_(?cqr;x##5a6Jogbmhv{-+#ur~5+40zA8&Z{^oB>%ZuBV(kYVOf z+0WZ1sL(z?Kii&Vj&2fRYHJsT9=l`pk7^RVWVve8V)w(w*mbm6uyzfuMHHKxN3l8W zk>i#Ri``G1N8UP{7x`65%`9X1IqTfwvSrE7R@Vpa-jO<8UP-Cw8u8NyhP~&vIW8?< zv3^MPjqNp#pR?*#?tAK+a?hQb#T&e_yX2r;a-eyn8n4N4J#q)@ksB<7d`-iAwP&}J zLHXxQm9ct@FryYaa!BRi%0Zq1^W5$NOH52=VNO%_m>exQi`>!LWf_0}|B7OKQfg1l z{qIuogf#v=zbLaHrpdC!$S}R90Aq*@E^l>VTdb1ySj{$1yl}1VL{QPF&SlxPTX($H zV`}K^x*z^+5I_I{ z1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009IL zKmY**5I_I{1Q0*~f&aC@gUS!vg`bu=zeU?8H)hYPE%LJ4PzKb8<`Bi!>#b0@5xmfi1* z;fu4gcIeVP7-N0xH9*AdlLxCa6VAbO?#L*wO9{_ zSh6irGfk+aAsNmWiosGVB{T_{CZ(IM`J$qxWi4m@(ceK)a1LC~;ob}9@VozAG@s5# z2vHECb|bWCwnUByVYA7$kloK>_Iz#wpUZPch-#~q$>)YagEHzP(^L%u=e#fPn?GeEEEi*=3o&Mi$lG|ZuY7n<8WZ!-X+=Np6$)sx{4ni zp1N7H!EOD5)q2j7LZ5xzjx^R4<~?pg7^g$*Yn~_!W@;}qqx7D;fxW$!qPCSj8O4;R zOPiM_L>$WUpAP1%yjn-bZpzE$9#yd|?z<=@>5W@r2A*l1#Uwr7^z2X|YhhSgM(Q0? zZT42-q`W5cb7V;9r{%jF1ZhHgiF;Zm87c0MdKopM>np4CobevvO&n0u91q&BP?*Lh zi-SzZSKT&-xq1lwD7Oa9ZKDyB7eeMyWPWLNOh#XjQP$#=?IJJeH|qS5ejmDHEj%Xr))d!=R1bI0-0v(FdqoO-`eQ!hZWji}?%nx@S@Rj9{& z-B7T*NllxvnmB?C*8wTVaJGe7(9Kd@HmTn1)Es%&-tsmof6Og>^iq{R?!>inS__fi zBM;HWKhD=DuYHoCJ4R*n?T9{|b#YJN1FKW*{eW=xn7`72Y0%&e{rBQVF6XM&J@{Cm zi!;WW6^(u!Ir3?pOkJ9_y{pxChTat|QjpdU`%|%z`uHSKG(U+Yv%Zd?@F^M>jlt>dq z$^Xkg1 +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBnjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIxIBGy/hgXxwCAggA +MBQGCCqGSIb3DQMHBAj96WZ8xRBC6QSCAVjQ7DTLCFeVW0ah1ECV+1bvGiQy9JwH +fxHD3s2Wg7+McsAfF2oSx8R0Za7miR70Ke94xrraIuH0NeltyalI5iQOjbGe1W8V +exnRfXI+87W9QHVI85TW2l6pXCR96cj6zrxQAhXFamDY/SfgwTbaQibrduD2eoct +IvJ8QsaywSKwpnQAN/4XlQ6aus7w1ywtvFek+15oAfgACG/mXaZZa9sg/pRzHT3a +8qJjMpJSDOd5QUxKIShidYPNKA88EIvdg9+0wNj42w9A4rAwaoqol4RzdLu8dXbG +lGjiRdGwkMvlwnAWY68hPnAPOiH8ev7lNPkOkk+YsIVoJK7AoEGyvNk2N02kaBBf +xfrHIt8jh8Suvfp0HJbdeBTTT1qu/acwNbeA2TVVXdXyoZTrSWiwmv4P0lBYXJIx +raWLqaaImi5JvL1o5ATr3s8RtD+0iWH5LUuWdzI/agJKUw== +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..692482662cf1dba509374bed35b67af68c2ca2cb GIT binary patch literal 725 zcmXqLV!Fu1$grS^>6Aee(=j$qZ8k<$R(1nMMwTX~?LeW;291{%niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#F*B=fMMhUL8uVWDyS_Bl?@aP@5qwPB{Bhb4H%#I8#mQVMU+G}RyUx~lKocUt0x13w`%B1h1 zkGo#Z2%a=4o~fiHmhGy!l69Eux9dJ$W$grS^X}dua(`GhKZ8k<$R(1nMMwTX~B|xDC295g{niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#F*B=fMMi9WdlV6d4#K(ScF&vCh=>W@LlpHOpWX0v|Ur5 z>^I( z1+QGMqRGpDypGd9E#tnkG(_^V^v44-?`9|Mo%4Wo&i4gPj2#9|j4eRi0K{4gn3))v zm>8MSY%(y$5o*!~l8{gnf`l3oc z48%ZuRS=)YfQyX-lB}3Hk=+4_3&)jSA5Sco(roP8)3^GxjK#0tY2M%5BGLn0-Y)rm pRLkXg^_}S_YaBz&KYixm_qV(0^X5$0<;x8rf191=Z>_oa4gmRD*NOlD literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.ocsp.req b/test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..c16dc3702ff8d251bf271f2f42201207026de07e GIT binary patch literal 105 zcmV-v0G9tSXE0?jJ}^8mIxqH2QUEw1QG-gk`E}zO{DZz LCJM=xx|QU=(IF#Q literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..76a2e149e8f39b44c5e6adb81f647c0e842b2bbd GIT binary patch literal 728 zcmXqLV!Fb`$grS^>8wE$(@8c?Z8k<$R(1nMMwTX~T|l9228~x2niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#F(~F3~Z!<0nl7S6C-m2%cup+T#PIj7A;gZP&AN7_=Sl@ zh(%x$zs3pQC11kSxK2*nHTB7U170>xtu~Lg@4SpaA2TpJGA!(7SaRm}?p2AR0qxr} zqAtvIyS><&!?0)HsqH2|)c@%uXFGn_J8QCC+PXVE_wT!zgkh$RGyUWsJZu@MbXZU~**Gk-#g;AnfQJ{wg+mi`jlZ%?a;w zXZ_D%^U5yzS09>PxAx8Zpo>09?^SrrV?A!4W3BS|Y=3sL%+~b}jUtb4&_B(@%*epF zSj#}efDh;)S$;;w|12!bOzaH?Vj#XMh|god#l`_iY|Na47e9mwZ2}I%}(>T I*4%ps0Cj8MQ2+n{ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.p12 b/test/aux-fixed/exim-ca/example.com/revoked1.example.com/revoked1.example.com.p12 new file mode 100644 index 0000000000000000000000000000000000000000..bcc39e53c4343fb3305b49c70d2b836aa0fc75f0 GIT binary patch literal 2380 zcmZvdc{J1u8^?d6F&V~g(k1(v<<20DEe+1ZgoH2|V#sckokT+@%GO{cYYf*;HH}Gi zb(6AOlqF+tY(=hY4P(1{*WPp9=bUFb-{(BfKhNi!2T9@r9YT^IP_<->WHvwOFsOv2 zNCGGDEF($(M+WU96F}Ps&W7;)YXZg#;wni1B_D_hNJR+mzvY9qN5Dcibe$U25dxBX zkAaxwwE9LauETxc1Q5>RE$X3$#4w@vMMPnS`30D`moVxgYdy~IM83fUdsQ?!o6C7n zKdMoXS+&Uj+Wx!A=`Y)PnNxW^VX|O_`@YynOPv2=j}hETGN>cUBIT%DfmwZZedUMj zJ(M5q5u1}jYIeu;+xZNI(#D3?YPJSe`8^Yz#!pbQL2X^;w-=kZo?>8H=HOX`Wrkbj zo@eG0uwjv$Nf&-`(C!=!FPphR%6xX)2&!L543#Y&K)Cqjvis6_ZvGj*U-Ew-BfW*<1Y05`q)7qj6TZR|MPY>Zq!vvd^B0>axYD*OCQsqYnZ zx?tHa?lCXtO-E$?DW1jNmv9NL*SryRl^||$9b)_0f>9b};J(av<(`IMj@Bh4>OaSX zifO4ys{$c_7Z3ql0Rj&4Wk3t~^&m$91b_%!1p*K1Ujfg9E)l8l-$A(65wMufW|hp2 zhcC9fLwQP39*w4@&m9K-VLy`rDLDXz3k3YEf&K>s$PW;{%U|fEhS(_=j}Lxv^_F-4 z0Yb?EXppNL4FV@42ho9G@&s)x>p&)mq+QVQzaVd@m-13LRa z&$7}UpO+vm?#iyx;xE-(!wCQ9^8}eZttWT13>pf-xtUDcbQ>-=MF(J8@38Z1bAR6y!BE<5vf zRa8^dNUU97wW?I7K&WD_6o zrF)5HHLZi|=QunOYpSlUH_TEKeD5hz@7qnKSr+G_-bYhwl)`4M29(1cc1`)vF~7g~ zD1~CRUNjID4*zoNwl|*@h~aXMFw`>jb;5<&(VV^g>q@xl2WI^PA~G6YsYi3`jkE|0 z7@DpgsXD(F8q9bb{8ji^27lZGA1k)Im)}YpcncbG?O_DHId1?mH1G%*Eh~O`dHP?6hFMhbm*MG z$xB}uFLl6eCp|c|UObH(0dH?gS@puI_X(>3S*xA<^S*DS(G$|D!jZ}|bK}us8eZMt z<`})Q);z3F#nAwjc3zLc6z;muI^Ujks0=;n$n}^$Vm0dn*WME9MUqF$9?^jijomN# zMrF4;dHg1ifby45LVc8}ICBWv@x!+y&B0OQH&xlYw`-TI2}P_2nRH&=;o^W13(- z)D8L@P3`Lj9_J9H>%8!^>Bit8GQ#OIQZ`juDCWUs)@04&I(25y9p9nZb|D6LdAwqiQ(TGi8xBxTilE2qbQ3hg#5FB$hWH$nsBo>V1y z`_`AY(#FzjwqhmVj z%+q>SkISE*FDZRan_pPf)(iY}ZMTFIM8Aa<{|)m_69>{SWg~2pV#U{+`S91WQ}12x zMA%GWB0ZHu?$5NF;fonwLQQv%Q9=rBwRe7Tj-7~;ZRmBSys$idmK)Oy&J>K>E{N|3 zV$M>q&@=vg64}FpMTti6yYfRDLAAWt2AKpJeSPSYb9cnUq`_`_x#vf73mL4WGNIU` zPH92^l|SuWH|3R)+7=`Es3Y-Ijv7z1{x}`Y-~{vFK96`SQcds^uUqGjaolBDgjC~H zuI=IV0Z+0?&htSLPExzC$)@Rf`=oFI0?^(!bGG#|GJL8(2Gc>DG9!L)SUZ8uFib9X z+mZ4xF={@|18y2ZS}rr<(4O2C;;CXTG_h%oT1kT`3+_=hb7P}tDaYQ!Gh}zQV&zef zE%QxaF0ta2`m8Q1-Qmn>h4l=qGkoYmFA|Hpv%d2M_w@QJOY0q|?%9X|&vjnCt@sGK zYCJ`JxjV`=EFh7!Si)M}ERfT*FIDO5*uxgwk)QWTUK2hS2j;2fI7x8#D2o5{nf)A* z`baq>6vC}8aEMES8vu*RaUbGijX}@Yih_r8gfnjirXg~{LT>QM(ORC_HvVAm^j^vZ K{vXc_0R9Hr!3hUq% z^aS>zvpW$Df>?zh|AEKMy!m?jt5+Hap@`H(wx2}y-B5N#wp>?+>?{Xvy-L)pzFP8| z?$X<5mn&Pjr;N3?9beDd-{nCB5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 z009IxMW7}xdyD2{bJ5(Cil_qt1Q0*~0R#|0009ILKmdV12sA{=>&g$|U3bd3@X5oA zeqWuXh0W72QN3=bua4Vob)K17V%@HXC`$+N(8PJ5b9jxzcKogu`i|W)l+@wz^d>C!Ljh{D$uL+k7f^_kA9@ zbmgR{b{ggJq=>V$T=D0(*!I zHm;gNt=akR?5yZ9Y4XKhfp&-8F70+lLZXxzy#fVq(?lWD^)zvO zW$B2O@gWx;EM5_x zy8UkYpdo5ZO4G9UjwJS(S9WxatJv$#QCwbEblThA`JQ68cacy%|954pdI|W@PTa3| z+^1E&Yg`k7Ld_qmA2y7^Yq_-igLdGT{l~(O35Ng-1_cc(m@u*LS!O#jb^( zJl8yjtyN$NF;Zn;*LA63lZ>+WmwkO5hjrAt5&ENzkM1wRWx4LBLVvF>^mWx~yV&o_ z;M%PMN8454$av}_$|uGCSBn#y-fC#PT~o8?$DdR4QwQHaHEY%N69Grk`=$Q9BxLLx zr%S!Vb~x=#6N9FP(Z6n?Mhm1BNe~=OR z5i-nT9coc)zne+>_e_@#-U3Uj_F9uT5Q+ ziI4uTY37%uT6K@UORXaE;om(AvWwzd&40X%GI|OzN6Luu4(G7lEU9I=yC|bz)}iA2 zl}i@~>$ZcbpIwZzX6J2=oiOwA$*O5{M^4Om^;+EdZML{QmSF$p)n~(kE>CC-sNeZo zb5qcreTVBhiWIdvx)y|16~41v#S7e?LSYpR&hMRvoTbjGPR)5XH8|yVa&XGCsxCk~ z2q1s}0tg_000IagfB*srAb^gSuw@==kot3k%_qpn6mA_`$cKkKf(Qn4C z((%K+3(E>7t(%$G_uFAh^XBdO`t_?hTLxA%`_k|;ANCnvcXHH;JWVv#a!r*RNtTXw4deQJ8ivu6usu^l#mTDR8m0Y?tJAfE+&Xuw;>dxP5wo%q z3*izo2YbKiS|Qmgy?Zu=`#!U&ymE2p^=8AuGZ#+M#o@Boac`%1HgdMPXG!64t0sNg zeRk^lJjYs>5GL2+)yM8eE~%={|6sH%th9F#HxMsjc&?@{%i<@`@xIYoB7CU+p@OWf zCq}mS*taIWP`c@eqazIOjPzvYFN)%}^W^=5$0Ek@x2^4Yu@zox6V{|!WrJjS+Dae%VdILvf9J0!v}^ws4iYqw03w1JZz_x{ztzxGwQu9Jf;#1H}cw~BF9Ud zTYaV+mr))4>yxO*U`#8r_=`CF$`kM0%zO147&q8EX_mZq-q}97?=MU;#=`|v2q|C* zNr4DA!7L4_1!;=Hm4um7;hKUTPpivC~zDPT?z009sH0T2KI5C8!X009sH0T2Lze;4>MpZ{6V8w5ZA Z1V8`;KmY_l00ck)1V8`;KwwS;egSvenJWMQ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/revoked2.example.com/pwdfile b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.chain.pem b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.chain.pem new file mode 100644 index 000000000..ecdf2a56d --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.chain.pem @@ -0,0 +1,29 @@ +Bag Attributes + friendlyName: revoked2.example.com + localKeyID: 17 78 A2 B6 AD CE 30 23 61 D1 78 DA EF AD AC 2D 72 C6 16 34 +subject=/CN=revoked2.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBTCCAa+gAwIBAgICAMowDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5jb20xGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDJaFw0zODAxMDExMjM0MDJaMB8xHTAbBgNVBAMTFHJldm9rZWQyLmV4YW1w +bGUuY29tMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALl7NO1x6uz5p6etz9g+bD4n +/s5Wh/XGDL1IHD78fRFFX9B8dCyoMrzjFTIz8QkOr/sA4RD2B2uk83ZnqtNImY0C +AwEAAaOBwDCBvTAOBgNVHQ8BAf8EBAMCBPAwIAYDVR0lAQH/BBYwFAYIKwYBBQUH +AwEGCCsGAQUFBwMCMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwuZXhhbXBs +ZS5jb20vbGF0ZXN0LmNybDA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0 +dHA6Ly9vc2NwL2V4YW1wbGUuY29tLzAfBgNVHREEGDAWghRyZXZva2VkMi5leGFt +cGxlLmNvbTANBgkqhkiG9w0BAQUFAANBAKtwWm1WtnL+jH97DwIutT6s4CkIY2uY +JkpV4segUV03S1pN9Cnamy4prQYPCfOI1BQO4krsDNOoV/PtDvqxuso= +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAxWhcNMzgw +MTAxMTIzNDAxWjAzMRQwEgYDVQQKEwtleGFtcGxlLmNvbTEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALGUYGllRw9Y +7ATtT3iqwv3rnnpYYWaxGdamUYznYS6l8lAyHFOqfEktdHZ+bUyRVWsbvyx/a2St +u1vpZpkihvMCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLmNvbS9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EApouSZ4cX2rx+pZWcDHJH+KaCMpMa +ScrHO8bFSCWI02ckzoIxWfu1DMNO++EpyzrTgyaXoCROjvhdslwucMqAIg== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.key b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.key new file mode 100644 index 000000000..41e27177d --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.key @@ -0,0 +1,15 @@ +Bag Attributes + friendlyName: revoked2.example.com + localKeyID: 17 78 A2 B6 AD CE 30 23 61 D1 78 DA EF AD AC 2D 72 C6 16 34 +Key Attributes: +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIFV1GIQOsrw4CAggA +MBQGCCqGSIb3DQMHBAgtBn7nWaro7ASCAWArJ92GA0suBbeIF2CisKcYFfGP+KD5 +LUOKocnSVgVeEvjQmoLzb/YAnXQsh3HtfHjbsJg1Hix4XIRI6skZD33JhhQZha/0 +M8QsA3GBCPcskjQCIMg0FVltjZOVnR20JxlI0HtMybZrIlhNCcWrLkVhU8CRbzFc +Pubs7P9xIxlfuWVAEBmlOb1LkctHKnWlvVDR4Bef7epwa/KttSmLbBHuayQiwvms +axUke+NYJvzFWfKpTXP0OHOfz7cdb5dN/BcF642LIGu2f7nY7vGbSG9+iZ4Mb85k +FBbuSFquqAdxho6IHL7p/xfsW3k8+o6jKhCqkFaY1O1TNLmNtyJSyULDEbJMBiBF +Q0pLC3AF6EtPDvN7gIvlY6jERZb7j8DJrCnjbEJR1IF09DrH3EdfaYLnGd+0/SRn +UPY0jNEmT8hwj1ANacuSlBaIXYSjtjDYwJTz4DJA36z+03TDo/ahxwaW +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..2d46e900ad38f09bc1dfdd836861f6bea4b45fc9 GIT binary patch literal 726 zcmXqLV!Fh|$grS^>9j!;({VOVZ8k<$R(1nMMwTX~9YCQi291{&niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#Kdr_i2=jR1%gl^pj}XF7AhMk8ptDj!o(uPBET{6$;(pH z=ghhlq1HRrv7R*GW#iOp^Jx3d%Lw!@1G6K;?Ei0HwuB!tRDSV>@%2oGe=3IG=Bde; zZVW!|tJ^Hg$RxE~=AlGG<+p9TP8Xi;KVPjBx2g1f0?R$oEwg8wyAqPQpoy`=poy^s zh#P=dYXLJ8BNG!NGn!2X#yCP!+CUN#l0uM>1O;MdUb=#FYEg-SoH#F1P#Q*w^BP+i zz(UqAik#>%h(UH4BQOlS84Ns_92s^b@QN}BJ9>w|ip}0)w%<>4!u#A=|8v;9vWx!J zhi2EUee*u(qEFI$6&~|gkK5;1t2{p2pPekTb^Sx5$m1LIPctzyGB7UIGSD#K1A0i7 zpONuD3kx$7dxL=(h_4Fb^B8ckaX^w9Gbge;AaUWi((B`iep{bY?}i20|_JpBH4H+|lm3A=o`A>?nf)BLS9_uc^jmcHLM literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.good.resp b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.good.resp new file mode 100644 index 0000000000000000000000000000000000000000..4651403ef188f1d44516bd0e52e060f325c177e4 GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXP)smrb{u65pSc`2ZzGrn``??bxoEF$0d5{^Ey zFJ@cy|K^Qi#Kdr_i2=jRg~|qs2J#4JGqDJ<2yje%^0L(QIkRp>sP&F@ ztS1e4**LY@JlekVG6Frv!0gD7lK1OX0jK+fO=aoNW6y~F?X)SK*nd2H*}L|&+dpg< zdEMiCv0N%@n%t&H{h2GuH43J)6}4P3U$gSQ)6b0Ds#u04N29l6q6M_UAD8w@J(iNOji%JaS#Cegz%`i%w*Vw`U7L0~bz$gm@USCm26(L4NAZ1xtj{eGGg-sjHxpTp*rUG%R$G`nu?oA*H% zeUjd*@R-MX+&;%z|~j(>mM3L9^asUnu(c_fpM{xfrbGe&_lBPjEw(TSeTjE z8w|uid{q#i$AF8C1Cp+oIg#A~i3`V-ULQ{^m(pzP+tauDw2Z~C-)Y|8+#=EgUEVJF qepJildG(#?CuGS4H*yYO&A%B~l=5MXJ_YMH#AlzyI literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.req b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..78aa197a418c986939cfb0c89f9dd9e3cc2183e6 GIT binary patch literal 106 zcmV-w0G0nRXfS3lKQKKoJ1_|b1uG5%0vZJX1Qf<69j$YHL$^87P;`l3iIw}pEk^_t z_6}gh;y-f+s{h&WEZOp@u#gme0s;Waq9ZUNFdqg9D+U1t1qUzz0t6BS5D1av>2)>d M11)$}JGia|$^4fh*#H0l literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..4651403ef188f1d44516bd0e52e060f325c177e4 GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXP)smrb{u65pSc`2ZzGrn``??bxoEF$0d5{^Ey zFJ@cy|K^Qi#Kdr_i2=jRg~|qs2J#4JGqDJ<2yje%^0L(QIkRp>sP&F@ ztS1e4**LY@JlekVG6Frv!0gD7lK1OX0jK+fO=aoNW6y~F?X)SK*nd2H*}L|&+dpg< zdEMiCv0N%@n%t&H{h2GuH43J)6}4P3U$gSQ)6b0Ds#u04N29l6q6M_UAD8w@J(iNOji%JaS#Cegz%`i%w*Vw`U7L0~bz$gm@USCm26(L4NAZ1xtj{eGGg-sjHxpTp*rUG%R$G`nu?oA*H% zeUjd*@R-MX+&;%z|~j(>mM3L9^asUnu(c_fpM{xfrbGe&_lBPjEw(TSeTjE z8w|uid{q#i$AF8C1Cp+oIg#A~i3`V-ULQ{^m(pzP+tauDw2Z~C-)Y|8+#=EgUEVJF qepJildG(#?CuGS4H*yYO&A%B~l=5MXJ_YMH#AlzyI literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.p12 b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.p12 new file mode 100644 index 0000000000000000000000000000000000000000..d94652edaab5e341235ee8c603577868efe7bed6 GIT binary patch literal 2388 zcmZvdc{CJ?7sqEaOBidG!H5`T$XM$sONQc^glr=-kI9}Q89c-o41re&_t|ANSt#z31M4?&q8@js^mPaWp7Gongt~2?Jrk0-6d9 zLWlEkwErW6U^qGmjH3g0po0I}5ZVI-70`iKcg19!3UtrE<=wMV5YgtIil?*k>hHn% zyoMd7G#mtibwlVtcjAMgz2IK1dyusldHoLmQERxC(57Rsu|6c+t^og{uKr8Z_NchxU zKhoR9jTPCH$j+nt%V$(K_MPz)O9~w+ExmTo)3oAt3h#W9wZ$tq;_^`UN=X(b>{Fk^ z(fE^Bp6t;QQXn{)H4MGXtF5i1>e+3hgiSbnP(_5xQTddZAAsVNwP_b$BU-^^M)Ky> zJS4Th&TizyCx5YI$zC5ScRK%9O@;YQ+1SZjU3f7qV;jQ!e0vt?Y{;;o2!6D7o2BZi z&2!@yu1qH+R7iDcysGr)_PJx<>g$q;_^KFIW<3}8{jysR(+0bY>9?S{toxgXmsJsB z>oSwnmb&>m!-^WV#xKce)9T>QWD}WUZp5{m(^SpLgn@h^TW7YFOo{EWRoE~F)csPM zj63|Fry?Y^)zJq4!2mBnC?F7Uez$r8bO48TYdF9IZ~+hm2-xip0nY7CFW~n7cX6+_ z6hu-wyr||;CvLw-Pxz!) ziLiq?tRkzk{pQWH!cnVo_z}^CcG*aSXioq8_@^IZI$W9@4fRG*DfOUSL~Dmo?!sGM z?5!uQR>Mlq>8tN{9?TqCLw*U8jfa#Feu0-b(gdzO{>_lyGY>`+Yv zF&1#$juI_kU67T7aOyId(~M68!lQ^|HnwEU5W z-(G3RIAAxnEUYDIAq0!|{ULiBDkq z%a=*`)a5e&xPRyma-*E<;@WUespZ$hKc}G<5UrCM?B;6#?o+A9NV# zFfAExF||Mp>DX|@@!I>*FH|jTych&VoI(I9>$CY)CHGkY{P&P+cdQu3a=p_5gQOmv zb^O>iJEI2}q>K83DD*#o$=iR&!1GtpcsXp!j1%~!-=Wa#L?bu)KtIm4RVmmzD-=Bqp?4J} zWP!_Zn2l&pGw@uw7d^m!`2Y~p^?bK(>c$c-Ta_K9SO{9Xf;zGCBpidA)Fxp!Xv*J!;HU#Vzfd zQR+jj--m1ziKmWV>XjtPAZC{4gd=_xm523K5DTtX84onJ^o+(D?tp5?zoYanE@tJn zdkBhj^CiG!w$~Y^EWEf%xk=#oT7XbRY}l2#+tKpl&HcF-!QIZCAaygJUu1>W2z}_$ zZim&5r=JABFZ|wu2&}*48yw(k2UB2kte=0XO4TTu;CUKFmNx6V9{gcW#b6#WO*n6!Bo}%rM7t)_h!a{t&S$542=;>|>3skHX?t_GVbbW{AyiNYTh^66u)kBPHR8*|u^_+VM$w zUrW5-w(aBNV-B6~oV4yMQxk&jo|w~oNffheR;a)kp;Ch=Njc z^RMFb6?+sI1Kf@Zza43yNwEDUc=<`)f&9Vqjh6+_ADz-pS5jGYTZ>*vZao+!&fNyM zT*c}i^t#9>lmHyafLsJ^h-cFy{FlZXnrqORlhomBR!#BC*J3!!Mc(c8T&^!h^@ZFi;jyaDU=3-zweWln zPO6?gUcBTJc&?4~_R{ON=MNPa_bHt!j_TD7eGXbMG?V^JSR}1&eedGX$=tT_Bl`iK z!>hdM-to#LDze&N-0%p`12f>I7urK9SQ0nL$e^5}1DRQS&}iufr)tvJ+&1O(2qq0T zo-jF;dD;!F^9Si6UZT%-d>Z+=Tb0>DR!f_h3MuT&o+NwT^3L+^d+|6}_i&A7R0BRm zx1M4NYz(YywcX4kuTj5DszpwiLye;~^puwcf5w%@hzpMNMLR=R0yIuQ;ON(DLt&~9 z;QutUzh~SpI3*kcDu6|TK_~$LM6#ri{fCa`&oempMk3|6n>e<-1{oq+vfzQSx_B`0 R6;}L(#tQQEUuFgX{0X^2MOFX+ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.pem b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.pem new file mode 100644 index 000000000..529be660e --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: revoked2.example.com + localKeyID: 17 78 A2 B6 AD CE 30 23 61 D1 78 DA EF AD AC 2D 72 C6 16 34 +subject=/CN=revoked2.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBTCCAa+gAwIBAgICAMowDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5jb20xGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDJaFw0zODAxMDExMjM0MDJaMB8xHTAbBgNVBAMTFHJldm9rZWQyLmV4YW1w +bGUuY29tMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALl7NO1x6uz5p6etz9g+bD4n +/s5Wh/XGDL1IHD78fRFFX9B8dCyoMrzjFTIz8QkOr/sA4RD2B2uk83ZnqtNImY0C +AwEAAaOBwDCBvTAOBgNVHQ8BAf8EBAMCBPAwIAYDVR0lAQH/BBYwFAYIKwYBBQUH +AwEGCCsGAQUFBwMCMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwuZXhhbXBs +ZS5jb20vbGF0ZXN0LmNybDA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0 +dHA6Ly9vc2NwL2V4YW1wbGUuY29tLzAfBgNVHREEGDAWghRyZXZva2VkMi5leGFt +cGxlLmNvbTANBgkqhkiG9w0BAQUFAANBAKtwWm1WtnL+jH97DwIutT6s4CkIY2uY +JkpV4segUV03S1pN9Cnamy4prQYPCfOI1BQO4krsDNOoV/PtDvqxuso= +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.unlocked.key b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.unlocked.key new file mode 100644 index 000000000..9c8a59b5a --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/revoked2.example.com.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBPAIBAAJBALl7NO1x6uz5p6etz9g+bD4n/s5Wh/XGDL1IHD78fRFFX9B8dCyo +MrzjFTIz8QkOr/sA4RD2B2uk83ZnqtNImY0CAwEAAQJBAKkeAI07YDOAEnCd1zPY +/sLRns+uMDtUwArZs/9uIe7a3X4ussXCv60z9epuGre7StXrVyDGBnGqGexsKIiH +uaECIQDzrY97z+Zcb1RZ/ncQfiep40jMGmpDX/un+wtfkeICWQIhAMLcSIgL/FTH +t7ehuH5pClcJY0bX0tbOpfNgOWvMniJVAiEAyrYMkewOb8Dxg/gLJn48ErkP2zLy +SWA0orZV7MgYIukCIBcGcIui3u4lq0/HjEVjpBUkxtZYKlG3mWRoumBCjW0BAiEA +tqIijH5G06iofDnTIJzXFfetUPNl/wqJ1Xz6ECFh84s= +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.com/revoked2.example.com/secmod.db b/test/aux-fixed/exim-ca/example.com/revoked2.example.com/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..b7f2179f712d5dc904d2c3785870ca0bfaac35a1 GIT binary patch literal 16384 zcmeI&JxT*X6u|LkA|ZuD8#|E!i|GQfUo2uHK?%eQth45 zC$JZt-HB)r#3}^&4?Je(&DYysz0%nCMWiOO{Uowyhq5EGWxFz@xg6N_Dp9ZcYRPT7 zOK+cTu59I=GS=RjuAa5O%Yz6YfB*srAbC;fY!do~sczNFNq6NQx1sm_HkXR*eV<1z zZ8_ zVNJ~>U7D^)6Ps!NAXge{(~*nHoGi91o!ORYk}dI9YIF`469{H7#~dpP%OlQ}1LUgervbln~>zQ_)=rMLX!bFgKoP-#0WE8jcNL32*&;edbF)X-9q2 zuhI8T-^`x*bo#gqhyVfzAbmR^Fb;HCw}0FTQ%R=Hv8h=U1*B=D#s9DR*qapsedjm-0go zpZ)94Gb7`3Q#X~wx>SQAl&wQ#NW(n^`6)`h(JW2cLBI9x+8qV;(A$ifhN($oB zG;43PSA>rc)0}CU&dfB6ewh#>v{%`;qjQ4{Z=*c=%f6oS=;bMoro(u~_7@_@k-f-~ zZ3}HuS3-;t!qK5_4RWAufb8cP)~}Vm&D!DtGaT7DPFJSz7GK!6M6HgRAC(woiK>g- z7MUAa9z`xGQ2Hf+qUMhZChf8vbeIX0QcT?bDfTfJ!W1u)=tjdarEx5Z!ejdoVvGfP1%%H z7m`D_{qc0zfN4AOCXIA2%Fl>jJAFa_BO{hBn78ZG*%wnc4l2It32-OMng0rF>ml{# zfo>tg^tNE5mY0@~mkus{toYISZg*CM)tZu>-ZXV=P1h3HIqp!cxdo&a`Yu~plC~n? zbVdHQ^_#n8PrO-H6!u2HNma+keqI?n_?7CkkP}6=S-1ChJC<`Ye?8#H&3)={`cVp5fNh+U<#s8`@D7ddz%uhaSD!?0)rrEDs81 ztF45!gGS<`oO|}K%BhI8b9c}@0~NRFG_Wl%*e0$ zdRXvtCDA{W`jpgtoRyk0gi?1<2_AY8IZr|b=X}_dBR~FPx*i;!m=H#@m4!l?0 zC4Z-~dbjm>WbomN@6LGz-Kamd^nz>F?w8l>JXDzb^SqdICu-iUKW#2juLq|VBv^iH ztxS}TEf#RM(^lJHAOsLV009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~ t0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q2LT;BP}L({um; literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server1.example.com/key3.db b/test/aux-fixed/exim-ca/example.com/server1.example.com/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..672b088266f945af2726bc85962d56a5effc6d87 GIT binary patch literal 16384 zcmeI$c`(#b902gQcClK&S+ZeA(oV|Fc3)IO$0{)$s8E)cb!@x#r>zuntwzYKL1`OD zX~PgrDMw}GC`sdJOwx30vW}+9CQ`EMkN$2ZlbP>#=FRsz@4cDtcRugGhcxD}5khJR zk=hZ`nJkeuLWIerT8R9+m^`1_AWr3}BSccw8HXa}lUWt2JE}G9LH;$*wD*OEAOHd& z00JNY0w4eaAOHd&00JN|Qv}Fpl=_uAK&_w_Q?sa^)Cw#YtH358KmY_l00ck)1V8`; zKmY_l00jOE0V1N|9HEFKTx`oZ%H|0|Ikx_M9%9B4#7uJyilvw(9>ECO>I5Q_PNESV zal;{#k`S39pg2B!kulaHr>GGKq*%h954(znqqQ7-0xM_VTjr8j7($Z2i7b>VW0={o zc@(8VvR6X7qHX=j6jQB1*@57Kmc$g-PWh7;vC*Y*ciY1ky41a4h7FNBZU?_CUMyZ@ z_bt!2FaA^d1t;&y#(>wF`1ohXoL3ft&I}#>J6-&FrrFXJ3|I9p3(MGj33@qR`no<5 ztmL+o#(lSZynhsUR58X@T~w>fJa>Qj^7ht^PUXZ%)2ydAd-g`Huru70RAW~|U$&vX z!pzFnxVqY&D|jYRP6(PmbQ!QQ?)C<{(Ex?D$@`qL zSzR(KO|$&fgIBPordlgUJ(2pBvYiS&({cyV+}4BzuZjwd&)swH9dQ>G(dlWtTW^V% z>AgCQr|nonW?1s^u9puU_&J9ud*n-%MJx5JeG}%SzL(8f<1gGQsXfEE6z43iq;NhO z)wy-oi>q|6sH<)NB5>aARqCd#3lNhi~-Uu6LQC~iMCmfVU`Z#Q4|~B%eA@DrqkB*U@}c~JIp4Y3biTv zMi1k;?|EvhZ@(tF4kuaU&bhuFU3+Sn1f$$nvuP9*y1dj|O}cCMR0+NBw^d8Az3=nL zRW{b?na)EKPm4H9-A?r%{zLuLx5XdZ_|bm*;P($20tg_000IagfB*srAbf?} EB>-qkxc~qF literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem new file mode 100644 index 000000000..6ea0a5291 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem @@ -0,0 +1,29 @@ +Bag Attributes + friendlyName: server1.example.com + localKeyID: 7B 32 26 98 D0 B8 1E 75 99 29 DC F8 13 EE 29 B7 59 E3 DC DC +subject=/CN=server1.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAjCCAaygAwIBAgIBZTANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwMVoXDTM4MDEwMTEyMzQwMVowHjEcMBoGA1UEAxMTc2VydmVyMS5leGFtcGxl +LmNvbTBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQC6EbKf3ZB2Zm+SVn7KzSofX5I+ +3KANkvS0aVxUS/mtnKJg6JLKc2dVav1OmPTF/M8J21F6tVd8EHWBrlsgS3QdAgMB +AAGjgb8wgbwwDgYDVR0PAQH/BAQDAgTwMCAGA1UdJQEB/wQWMBQGCCsGAQUFBwMB +BggrBgEFBQcDAjAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLmV4YW1wbGUu +Y29tL2xhdGVzdC5jcmwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRw +Oi8vb3NjcC9leGFtcGxlLmNvbS8wHgYDVR0RBBcwFYITc2VydmVyMS5leGFtcGxl +LmNvbTANBgkqhkiG9w0BAQUFAANBALDva+1Fm8VMNtBTzLmk0wd+rAGNry/HPB++ +vNngBR33/8N/529Zr4WPrL2BeOZkQeDO1qH/2giCAvYfZoBOIO4= +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAxWhcNMzgw +MTAxMTIzNDAxWjAzMRQwEgYDVQQKEwtleGFtcGxlLmNvbTEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALGUYGllRw9Y +7ATtT3iqwv3rnnpYYWaxGdamUYznYS6l8lAyHFOqfEktdHZ+bUyRVWsbvyx/a2St +u1vpZpkihvMCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLmNvbS9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EApouSZ4cX2rx+pZWcDHJH+KaCMpMa +ScrHO8bFSCWI02ckzoIxWfu1DMNO++EpyzrTgyaXoCROjvhdslwucMqAIg== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.key b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.key new file mode 100644 index 000000000..02d5161e4 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.key @@ -0,0 +1,15 @@ +Bag Attributes + friendlyName: server1.example.com + localKeyID: 7B 32 26 98 D0 B8 1E 75 99 29 DC F8 13 EE 29 B7 59 E3 DC DC +Key Attributes: +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBnjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIt+n3xYebFlACAggA +MBQGCCqGSIb3DQMHBAi30QtCXj3kIQSCAVjO+WdU7jaPYN1v7ev2qNehi8MrvllJ +Q03/xCaiGTI7fUQM55W4Tc5+b952ni6ZtCnYfCojIQ6Wr0uyrabRE9nCRTudKAGv ++RG/vO576Wv69XblZaKwPp1ru5Fb+TqMRDmHsJKzmjx4/iN3l/673w8QEW+opYjI +i+azRCzMjUcFDkExEqXunJCDD4k0iWv/LTiXa/WfKoPncY6dmtjGt/ceGG7gn+sy +IGTPbVyX85I4lfSb42mQjticlqpNWNv+BasZNGIAGkreGEIR1HqvoIeIjyze4j/k +yAA/oAO7WucowZfX6Rcno9yO5Cjsbn60RPMe5aSnCKXH8OnaklegbzQCIXwlRapH +VCE28ladQ1+7zwCBhCW60WwhRN0UDQz9aFTrbhZ0uUZ13t/EcRr17f43hXnjwCVg ++q6ixyRnx4zSncCTL6iOe2ybUV8IXCFdrWnd7CYJOz804w== +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..0e35bdfffdc0d9ba2be279c4a345fef58d479ee0 GIT binary patch literal 725 zcmXqLV!Fu1$grS^>6Aee(=j$qZ8k<$R(1nMMwTX~?LeW;291{%niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#F*N^fMMhUL8uVWDyS_Bl?@aP(??8snkoi_1&dex1&Y}NCh1w3*s(ery|_IZ^! zn>fpyrK%<>{#@^7#lBo)skct>Z>sW)<|Pw0Uh%q8c{3`#s@KNw&7B2Jj2#9|j4eRi z0K{4gn3))vm>8MSY%(y$5s=abl8}HDf&?Te3^Vi66`WIxN(|)0d67cWFiM=)*unr7 zu!d3O#EwA>vdb8OVc^YR;KAg`up@z2ltI|hJN#8__7=1Kewq{B=g#_{!{(J;^shcN zyKe29_dyqZlHRNEn8$kDKF3<+@!9_DWSOn&9~wm--=Ke*iJ6gsaj}+xh5;YYL$dsg zjQ?3!n3>oc48%ZuRS=)YfQyX-lG2ztk=+4_3&)jSA5Sco(roP8)3^GxjK#0tY2M%5 xBGLn0-Y)rmRLkXg^_}S_YaBz&KYixm_qV(0^X5$0<;x8rf191=Z>_oa4giXJ+^_%u literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp new file mode 100644 index 0000000000000000000000000000000000000000..c616136d2be13cc941bee40b15b364b5fb5ceacb GIT binary patch literal 706 zcmXqLV%o>W$grS^X}dua(`GhKZ8k<$R(1nMMwTX~B|xDC295g{niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#F*N^fMMi9WdlV6d4#K(ScF&vnAn1^+F5K2-KeDdcX7*d zRRdl&POUbNw(q=*K)*3CJ2F^xakuIBuHpNzrj5n$fZqITT`df6&4u#ImRxTOnl)wR z%{XyU+iwg%E-3wV+2sLQ~Nl2&(K|&1_V3~R83eKrTB?fZhyhy=j7$weYY+(QkMZ+j^qQW2s z*=3BtFz{wD@L+Oe*pa|1${_6M9sVjddyCnAKg|j6b7%d}Ve`r^`d1&CUAOkl`=E05nT#^TrSH1BV25$S<0ZO``g|0d2=T0^5uq*zs*kbx7OTy2LQE!**yRN literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.req b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..fb9674a6fc824d2f2a4ed4103bf6de35a63a5c7f GIT binary patch literal 105 zcmV-v0G9tSXE0?jJ}^8mIxqBBQPN_9|j341_1>H2QUEw1QG-g0tQpnJ~**e Lu_7(~qlBj=#4sVJ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..aa6d371b46381fa0d55063969550edb2581c5fae GIT binary patch literal 728 zcmXqLV!Fb`$grS^>8wE$(@8c?Z8k<$R(1nMMwTX~T|l9228~x2niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#F)BJ3~Z!<0nl7S6C-m2%cup+T#PIj7A;gZP&AN7_=Sl@ zh(&;jE%>UP#m3N$O1gg+w=7pR;AP{~YV&CO&dUh&F$1$BLuzvw^R8wF=CX9fpT7=q zKk=LQzK*kROTX0KnF(SC^rX)0-0xSXwm;%$j`FGPOpFq)2RN>L_X#+_}SPDVH5)_P?dFcwysYN9Qa^k#5 zfoT{e&TDL801I2gC~_jmAO_iGjKDDPW-#zza%9+%z$?li?C2f-DmHtI*?vFG3GZ`f z{m)_Z$}aj>ADUga_RagCi#|#3Rd~!}J#L?4t@8M6e|ECW*7XmKB9Cv-Kh4C<$iTQ* z%Rs|`59lFTen!UsEG*1S>Cd_St?^1S-a^piD?A?BYx^YHuI-Sl~LChYR%hLFF_PV=|c H+~kFk^`OL{f3WGN-0 z?2;ccPgAl?4osI)kmtSM_I~I5?m2fk-*fK$=YG!lA}M@8ek279(Mma&vMCA_ z1kx$$6i|ZD9Fp>XWZ*6`0r-7C*TEwH+BhH#h2O7X{ffd_v{KEpCA*I0CaUH72IAMAPI#ACCUcAq!r`f7{)@aI_vgVFO2a!e5k>9 zvmVh$`aXCVcA_&1qKMgu%Ziun8zO}U^<`VcU*u+t#>LSfWv^OXiuS`?lr= zmd$N-i+fg|q32l4nfUb}e;3EAkH05z7(GCChsM^@=dJQ?R0t4u+k+zPiQI6WcC zS#LWoS~yTZJJ#L!V~FDFV0U<~Xw)xNIpWk9ij0f$dQ^OQhZu*M41Y5QSwJUEqx1W& zc;BKn2N9f*0zL&xG^ic^VLj``sy@Cnj@t-n0y@xW~ zb}fl+4C{_aqt8z4Rz=tANgmUSE2-{k7_@iin>3oG%L8noLU2?oYZLEilcmlayOTV{(Ah;XZup2MT?sX1`^(qSuUp7 zn95>-8ga9VOl3l`oy2=X_m0Bk<;^M;&9<*D1t3(VdToGLzg%WaT-=Pj-tHqI|UQk%e$yGLVf0wW=>f~DKm zyq2rP?s55wH)d;YG#kJbIOxqibt}z-a-jEoY&FSjtG+E)P(nfW6ehG@$?`Rh>dCHv zeI?2Eo1fqI3)8RDPPEP$6*K(Bht?!jnqiuZ4lI(7c!e2GeDrux!y$kK6}-l^d6J6S zfg5&^(?4k4i@R_Pb;le%!nT?x%MFHuoqcH^ic*@zd&&vD+%qK>NgK271*%tV*BP`D z7BXupZxkftzh-b(R4PxXahAgYFv~AxGiYov3n%WuuBGXspiCPx5z_)p|Jvu08IcH_ z$+|ATUY35zmMz_)0j_0kU+|u>1}o5MuSVYgT&HvrR;(^UbG`K3R$)O@UjaY-42^kF zjMb!+L!dca;f?AT{Vp~4+K)o>4DP^YiHSWfSMoH&c1}Ub?3U5dw9|tpTE{enBt9+q ztsU##5pz{IxS&u(dd{fOJJUGkuYx5)cU`N?W3mp_*q>!VJv_}%o8AOW%oUj)64e75 zaYj8ZFTq;gj9G4$FXKSHM>|~^??-+khjze!86UN-j}F+Wng(r&G|b^0=kfQ1yTYmG zu(3Mb69d&Tb0@c1;kk`(ji2UUT&!=`3pUec2_y_9&6yb1=)Njd@fB_$l(5?ZOy9ig zx*EuRTd8grZRl*>b(tx@-4SSLZDTT_P)5>JpPYb4$J|tJ>#p`pM=7(LZ0v$HqFcYY zW-vmG9*X+CnR9qtpXCiV-s)&p>LFq(HxlN*SM)tEiwrSQX|HT3xpV?x*e9XzgS38n zd6a4~^ZSRzdR|{e8AyaOqr^3sqny9P2UvX)lYW<11Tj{e>ffE(F(}?n@eN;B@lz>_S4`1GzU1}ln@3}hX<8dSkX=Yud3!ZilCI6K2adE8^DKN| zbf8^pzFS2zB&08moVMyTB8)JL#OXfeNXpS5-5WZ`CUU3`+w5=DXy0YNLh4*@12`NG za6$&i%zh*+O)}7#_9?jD#uyF`lXv~Oc)i9mqv3{nR#r#VPu~c8QYf1`LH2SoN}KxPq{(8A2~-%2Iz4eSk$QjE3X zxsFz4&XTVtQ@l^{xCRT#a|nB})?A~ERl+A)<@qf4HT?4LS=GjQOFyGtj;9^y`gkFE z)cxu68PgTbQt?d}7lYh}dd0_Krt~?Cf9K*%q!Y+(wv5a{$khqs$tBt1{D}^hI%8`< z)QL7pwkLTu0TR=7aiG@m30aMwH8XG)d;AOg&9BDp$v8Lc>(}9Dx)%7lFsG7dgZgS0 zs9$c}$ICr4m3!EG_~ga=3TzPW{5!p-7Av3FBLQLOp*CJdlk#(MLt}fWe|$KA;L9MU z+ud>ffp8&xp(Gj-SRLd;8_Z7u9rwY#LX8DtRwq4kkxMDAw^KX(XH|{ivTng&R*slF zW@b92r0WhyOk-DPt zVZABd`nPFS*nMsbMRp`Z+#!#_a$oOqsrZL% z*0a^(5pi*zzS*sYAG(EoX;bnc-_)i!O-p;^d-XT9e@1=55U?Xi4ZD$Dgit;^9rQFo z=$d}U%jQcU@3Wl=%`N5^kF}({w=Yt9WKvIPP7o^LpK1J;~9h80#eQ}LXg#H91E&;!t{zBtNY3%VwjYL0-$v;gD G0QdvNa6p6r literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.pem b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.pem new file mode 100644 index 000000000..5080ef803 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: server1.example.com + localKeyID: 7B 32 26 98 D0 B8 1E 75 99 29 DC F8 13 EE 29 B7 59 E3 DC DC +subject=/CN=server1.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAjCCAaygAwIBAgIBZTANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwMVoXDTM4MDEwMTEyMzQwMVowHjEcMBoGA1UEAxMTc2VydmVyMS5leGFtcGxl +LmNvbTBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQC6EbKf3ZB2Zm+SVn7KzSofX5I+ +3KANkvS0aVxUS/mtnKJg6JLKc2dVav1OmPTF/M8J21F6tVd8EHWBrlsgS3QdAgMB +AAGjgb8wgbwwDgYDVR0PAQH/BAQDAgTwMCAGA1UdJQEB/wQWMBQGCCsGAQUFBwMB +BggrBgEFBQcDAjAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLmV4YW1wbGUu +Y29tL2xhdGVzdC5jcmwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRw +Oi8vb3NjcC9leGFtcGxlLmNvbS8wHgYDVR0RBBcwFYITc2VydmVyMS5leGFtcGxl +LmNvbTANBgkqhkiG9w0BAQUFAANBALDva+1Fm8VMNtBTzLmk0wd+rAGNry/HPB++ +vNngBR33/8N/529Zr4WPrL2BeOZkQeDO1qH/2giCAvYfZoBOIO4= +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key new file mode 100644 index 000000000..a61697416 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBOQIBAAJBALoRsp/dkHZmb5JWfsrNKh9fkj7coA2S9LRpXFRL+a2comDokspz +Z1Vq/U6Y9MX8zwnbUXq1V3wQdYGuWyBLdB0CAwEAAQJAC7hRqAAsuUh6fp00H1IM +9Szv6UW8Tx6Si0qXpjei4mx/reGBvQGTIUJuGdXmuBH5tQHLPskjEqXmgiccWydz +gQIhAPCP3JccbCUpKELah84ikXuQs0PEnGfyg4oP22x0B5q3AiEAxgKV7eFrd5Qa +FfjHsK/HfrL8YQYynm8yDqqHnSsJY8sCIFei4Sa/uPoUs1EfkWfcGgnc3iGrB5uq +spbiTfqFjpujAiAcWvhvdU13dUz7AoJOKg3udeEwX7vV9mR7ty3ucuBIWwIgEy7b +le8z7zokRTzIKSMpl5xr/0Vp6DWlS0KwuLNuJjc= +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/ca_chain.pem b/test/aux-fixed/exim-ca/example.com/server2.example.com/ca_chain.pem new file mode 100644 index 000000000..dc1fbb709 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/server2.example.com/ca_chain.pem @@ -0,0 +1,47 @@ +Bag Attributes + friendlyName: Signing Cert +subject=/O=example.com/CN=clica Signing Cert +issuer=/O=example.com/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAxWhcNMzgw +MTAxMTIzNDAxWjAzMRQwEgYDVQQKEwtleGFtcGxlLmNvbTEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALGUYGllRw9Y +7ATtT3iqwv3rnnpYYWaxGdamUYznYS6l8lAyHFOqfEktdHZ+bUyRVWsbvyx/a2St +u1vpZpkihvMCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLmNvbS9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EApouSZ4cX2rx+pZWcDHJH+KaCMpMa +ScrHO8bFSCWI02ckzoIxWfu1DMNO++EpyzrTgyaXoCROjvhdslwucMqAIg== +-----END CERTIFICATE----- +Bag Attributes + friendlyName: Certificate Authority +subject=/O=example.com/CN=clica CA +issuer=/O=example.com/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBaTCCAROgAwIBAgIBATANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAwWhcNMzgw +MTAxMTIzNDAwWjApMRQwEgYDVQQKEwtleGFtcGxlLmNvbTERMA8GA1UEAxMIY2xp +Y2EgQ0EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAxYR8NYQvEd7/e4MvOj9dh2+o +mnywT9ajMo1589DWt2z14ouRKhSZWlx4O4AicPZc6n4uvt7++t0tTHhmm5JIbwID +AQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjANBgkq +hkiG9w0BAQUFAANBALjVd1KMBadFJFIzTEspoPYxJvXKvLMclekQs5QY0lmmUj5+ +ugITEG6ywu3s+REUB+8Dj+ofQz3tgIm9NBpkfsA= +-----END CERTIFICATE----- +Bag Attributes + friendlyName: server2.example.com + localKeyID: 69 B2 C3 8A B6 1C C2 19 F4 1B 4E 74 28 AF 12 89 E8 2E D9 BE +subject=/CN=server2.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAzCCAa2gAwIBAgICAMkwDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5jb20xGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDFaFw0zODAxMDExMjM0MDFaMB4xHDAaBgNVBAMTE3NlcnZlcjIuZXhhbXBs +ZS5jb20wXDANBgkqhkiG9w0BAQEFAANLADBIAkEA2TCJENbO0UK+Cjs2HSqq1OlM +VIJQs/ctua3DEcPOphjNwLrUqVGv5qkWFDHbsJ00hpiW7uK9tDfawSWmcFis1wID +AQABo4G/MIG8MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +LmNvbS9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5jb20vMB4GA1UdEQQXMBWCE3NlcnZlcjIuZXhhbXBs +ZS5jb20wDQYJKoZIhvcNAQEFBQADQQCeF6NprEufUaSaqXhBk7hP7kX2NtTEkHmg +hm1yvEzKL1/7gmqhMAGFapGV90k/8J6L4FiIEaxIHuTvm94KfKZi +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/cert8.db b/test/aux-fixed/exim-ca/example.com/server2.example.com/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..840f694314f2c1e92ff276731666747de8ba4018 GIT binary patch literal 65536 zcmeI*dr(wm9LDkYoLz7uNs$%shGd|5W8VeTW@TB)am0~P(QJ@#ig3YIZnJELMW|@2 zj&|`vc`2hYF-<3xn#}N$W*3^AQlrTxEo*8tZ<8sOV|EU!34~+II8HX-vvcO0efR8n z&->Z;_viDj2<(_8giwVr?iXT+b}H@?LeUQTE=*TWw9gwF3=PMIk3^7uUQzJW586@R z^lS9}mTxBC^W5@&=@0<~5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009IL zKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|00D+q&5G3jyzd4RLwmIfF zk{rDp^+~l!HhYxaX1~ma00IagfB*srAbap$roX= zTybf8Xr)0_R8>)AaNr$%yeZ!LU_}WC5VE(`EIR}m#v6k|?{t=A3}(wki(asoNci=CeAHJhMrO(2nLUcmXC5z$ z-EsKOKfdjsT9UJJaY~_TP=vC&r;KhGQ@2n>xokAaK<%Ip{Vr`p-P-AGMolBI@iS-? zhGenz%g4tq3|KoXdTe~^$ljIbtv%1x)>L<`IM%*;X~g~sRb!LNwyB}*3%2Y&dE)mF zbDPtK=Z<$DYCk!1{`Q2qx8#!=qH5g$IT5g{yNj6i|pi^9vytsqj5L-5TazHwX5vx zyC$^Q>7M3v$Hg|9U}_6(!lW%8@SxLO>?$k}LE>XarG19Im%WqyNMd#3q{KmqZdD%Gunht}1Qe&sni+ejO9n zb=>;W5&b>W%JNeeji1_OXTKR!CvAN1p<_AAdw9?K64V(o{U2#*Jtf{WQ7vSg-qziy z1(s#6%9zS~ymwFbc#3QmOSU_&aoX3Cr$wTRJ+WGIGe|9UUA16w?%eQ0HDzlmUTW(e zexa&7Zb|16wI2=saBoV?yaTz>`^v2oF23D%&!~&v_x{v&V0On-zS)kl4FeV}|yb$$PLH|`19v#%=Rvt8Q`u1kCKr*&aw>o=QTPVg>!;ndOXZw)&1 zeoR$S`i8H3H8N|boK@4bN{nY@lwJ`r`Wgda(i~{&8>p?a(8i$reWtdmW)iM`Ur~(r zN^O0EtM8@ajkr>Bg~i!LmPQGCi;UEtCBzsmJC?T;!Eg2(X_dGte6?%C$XC){Td}Sr zdCAt%r-q#$c<_Vgr&oIO-8HGTmWMBvPkB`;PfuA?Q9r_QX4Qi4(&vS2NQwOM^vc6Q zrB#o%GzXPdPQXjI$!Z%sCISc`fB*srAb@$zW_)@4!{5a literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/key3.db b/test/aux-fixed/exim-ca/example.com/server2.example.com/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..89bff133c640624ba0a5ca20ba26a6e65026d4e3 GIT binary patch literal 16384 zcmeI$`%BYN6aeu1b#u;KehoKs>XhiA%$!qvg-p`yVHhO%M6{;P5|>+BS-y&b?D6?6Z3&7r%_vvucEP6B^m z-vBG($Wf%nlpd3+wqq1+j9{ZTKQ5EapH}7xYCVptR6?#;d`TdRun9lQ3y&uF^F-n( zL5vov$1U_}`WE_I<;Mc<2?8Jh0w4eaAOHd&00JNY0wC}Y1PF*K=80l?B6}9^GWVR2 z&truP&LOr0ld`Qye?K?bbRyL{Xu&q$h3mqg=`=Q~w1XRZIV3F%BTBHqR#L~QB!(H0 zv%J15QrYW94w3qc(R|Ob#)1r;!RwBZx$DWFv%{6cH}BB&PEej^vKq@dn5D^Fz_ri} z--nBaSF&ZySpm(&l(N`1+dIuTm~%aScMZe5!H2H9#w;5(dN*{}G$SQ4x32r~BXP4V zR#zau=VrEOw!NMDY?^vG7<2N9?rb!AJ-645Rab_PY|4_)sF>=MvN*zUF>iiyx)69P3 z`-<@wruA@n#+ORFBj@%Uv5=N zcj@i3U31OlxLA8@R`sm?T^>XL0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY** z5I|s41ZwiKyJ$VO7OhRGh&m8J009ILKmY**5I_I{1Q7U(Ktq(guKW?+v&SME)#Aa$ zV4%*@LYp*5RKM39sH09tooCT3(KhQL%+g^zielq?xi;6@9Jlp6m`oGh4zr1;LT!q^ z(ZhJ|d!8EWo3BZ(!$}sobFObkSDqRs!6^6DY#IfHE-&?#lkUnrRYLFkZPik2@B2J* znT>UNs`Jpq(<07Nw^RLxe_ucGZSjXTeze~{`0bsB00IagfB*srAbm$ E0}(_^x&QzG literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.chain.pem b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.chain.pem new file mode 100644 index 000000000..52263a231 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.chain.pem @@ -0,0 +1,29 @@ +Bag Attributes + friendlyName: server2.example.com + localKeyID: 69 B2 C3 8A B6 1C C2 19 F4 1B 4E 74 28 AF 12 89 E8 2E D9 BE +subject=/CN=server2.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAzCCAa2gAwIBAgICAMkwDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5jb20xGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDFaFw0zODAxMDExMjM0MDFaMB4xHDAaBgNVBAMTE3NlcnZlcjIuZXhhbXBs +ZS5jb20wXDANBgkqhkiG9w0BAQEFAANLADBIAkEA2TCJENbO0UK+Cjs2HSqq1OlM +VIJQs/ctua3DEcPOphjNwLrUqVGv5qkWFDHbsJ00hpiW7uK9tDfawSWmcFis1wID +AQABo4G/MIG8MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +LmNvbS9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5jb20vMB4GA1UdEQQXMBWCE3NlcnZlcjIuZXhhbXBs +ZS5jb20wDQYJKoZIhvcNAQEFBQADQQCeF6NprEufUaSaqXhBk7hP7kX2NtTEkHmg +hm1yvEzKL1/7gmqhMAGFapGV90k/8J6L4FiIEaxIHuTvm94KfKZi +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLmNvbTERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAxWhcNMzgw +MTAxMTIzNDAxWjAzMRQwEgYDVQQKEwtleGFtcGxlLmNvbTEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALGUYGllRw9Y +7ATtT3iqwv3rnnpYYWaxGdamUYznYS6l8lAyHFOqfEktdHZ+bUyRVWsbvyx/a2St +u1vpZpkihvMCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLmNvbS9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EApouSZ4cX2rx+pZWcDHJH+KaCMpMa +ScrHO8bFSCWI02ckzoIxWfu1DMNO++EpyzrTgyaXoCROjvhdslwucMqAIg== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.key b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.key new file mode 100644 index 000000000..a4960f965 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.key @@ -0,0 +1,15 @@ +Bag Attributes + friendlyName: server2.example.com + localKeyID: 69 B2 C3 8A B6 1C C2 19 F4 1B 4E 74 28 AF 12 89 E8 2E D9 BE +Key Attributes: +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBnjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIFmRnQVx4IM4CAggA +MBQGCCqGSIb3DQMHBAj96PHFOGcW+gSCAVhUx92WT6m/52ZEGgqV+RyBKgHPv0Vk +NCrmKEJJAvGRWGl+jnpU780hLNx+qWHxGV6r+wyPN9F81oDhqeYQtIRIYC8tWBeC +9mouIU/iNXYUkun4ZaH6sIJSFfB/2l/pz5/GaiCqgQPPufGmRFsHcGcZlYpnLHkb +PyRFagan7QYIwUouBTyJ0o/OKBU/r6QM+ZO1zB4YqUutpYMTUbcD9zkj3eAFpIDZ +fuci+WK1imuUek9LdKifM8f5jdc4n/Ya5rFcpHg45CXz+pLntsprjQVzhFdQblZW +60ZyiJm682h7ioHhcJYmYyEa5DMItEqzLasQncMi/s8+SUCqTE0QaWYWJ+ofv1cD +GBYWoM7Ar47zaqgQYlKMKs9mDfUQ4FQy382yrnsPnyo+K8ra5ESUA++uIxMwouHo +x3dD4wV51jP8VC9VN2GWprZWffnxwMP4PxZejmZVbSWvPw== +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..baa228161473566d31dd42e5529aaa0fe6dca61e GIT binary patch literal 726 zcmXqLV!Fh|$grS^>9j!;({VOVZ8k<$R(1nMMwTX~9YCQi291{&niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw^Qi#Kds2i2=jR1%gl^pj}XF7AhMk8ptDj!o(uPB9P_B(=hL} zTbI#SH9&8U}no56SW~ zGX7^_VP;})Fc1UrRY80n11>fWNK#|wM0N)xE*w{SeLS&TO0%(VPv7d(G8Vsnr+I&K xi%1W2dAsEMQ7xC})pw?!tZ@u6|MZ!M-{0=0&zm!0moGPj{B3rczqRJxI{*Md+WG(h literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.good.resp b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.good.resp new file mode 100644 index 0000000000000000000000000000000000000000..80180be4ba56b70260ef590b171e54426aca004b GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXP)smrb{u65pSc`2ZzGrn``??bxoEF$0d5{^Ey zFJ@cy|K^Qi#Kds2i2=jRg~|qs2J#4JGqDJ<2xR&3G|W5g)@3xIpfuaH zSl)n_jZ>@5qwPB{BhYgU%#IA*;u3q7Y~9*>*;A|6@)E1U9IeeFv0=R-OYd58_w{w3 z_WaxP=zHl(7dbwsIX0D&HZqehu`V+2sUX0Nl35>L4pkwVwrjA3eKrTB?fZhyh!0@7$weYY+(QkM#Cs_;=&*X z*=3BtFz{wD@L+Oe*pa|1${_6M9sVjddyCnAKg|j6b7%d}Ve`r^`d1&CUAOkl`=E05nT#^TrSH1BV25$S<0ZO``g|0d2=T0^5uq*zs*kbx7OTy2LKng)*1i+ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.req b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..fe4957efd362e80df581aea400ad75a09a4e924e GIT binary patch literal 106 zcmV-w0G0nRXfS3lKQKKoJ1_|b1uG5%0vZJX1Qf<69j$YHL$^87P;`l3iIw}pEk^_t z_6}gh;y-f+s{h&WEZOp@u#gme0s;WZq9ZUNFdqg9D+U1t1qUzz0t6BS5Nb{gfS$`n MiZYOJb!$a)AM~jq+W-In literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..80180be4ba56b70260ef590b171e54426aca004b GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0ON-=Nd{GNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXP)smrb{u65pSc`2ZzGrn``??bxoEF$0d5{^Ey zFJ@cy|K^Qi#Kds2i2=jRg~|qs2J#4JGqDJ<2xR&3G|W5g)@3xIpfuaH zSl)n_jZ>@5qwPB{BhYgU%#IA*;u3q7Y~9*>*;A|6@)E1U9IeeFv0=R-OYd58_w{w3 z_WaxP=zHl(7dbwsIX0D&HZqehu`V+2sUX0Nl35>L4pkwVwrjA3eKrTB?fZhyh!0@7$weYY+(QkM#Cs_;=&*X z*=3BtFz{wD@L+Oe*pa|1${_6M9sVjddyCnAKg|j6b7%d}Ve`r^`d1&CUAOkl`=E05nT#^TrSH1BV25$S<0ZO``g|0d2=T0^5uq*zs*kbx7OTy2LKng)*1i+ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.p12 b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.p12 new file mode 100644 index 0000000000000000000000000000000000000000..c080a6a7ea63e1adbe1e0e86836fde396af38663 GIT binary patch literal 2378 zcmZvddo&Y_8^Ec|bI=d27!+yJtc{K$YvI48=1 z42flp@$o_WKqR2cH50A*Mih@+yX(-yhJ)z+4qYC7509qw->&7{qMCX$zIMt4=0%cQ z;x6Yu#2JZ|My8J6&l?NUOp+0ienGG`_Hem1B-?oOm87t~7$?S_|Ga_UR7>or(C6Gg zrXArWr;V<)^3M5s%nQ-{km%ch!P2Rl9Np8C`1aa#jI1A%U3w(*1s1w;bd@O8^* zc&2hxU^j4$d^6On|1TYAou$-07{w#e%h^85LDs<(tuSu9yQ7Z$=b1t< zw5oy%AQW&J5CRDQyJ7&EI~@=30$c|K0sMDnO@KEb5O5uZ`0tuDS_TBe)-e*E?rqz% zB4>kBt&xoXtT{pl{2jk@0VeNY!UqKWt^xlC1Mn{l%8Sc1wMbB&=$-Eo1xw(Yzc3*0 zU)QL56$CM%`Q=T)NP9ZS7U}?a zrU5$ZFJPwry6%WAkx^#qxOGV`6%_pG`h?-`Ag)ik<+PuU<;#-CF5W-qc&YoPnT}O& z_bQ0Uj%M%KZMVX;5fp6W7tW=H$gu0L`aQg`HJTKpGdsK5io&=Ys;8I6%ADKH5p7O0 zrx0ZBMNCnDD&o!jqAum{Z%QcjFCDrB4q$y*`AGGBJ<#6ZXww{&%CMW&cwE`GdkWIe zFsI~p$w3v5-wRt#r0OmBI6vrCg8Mavlt6Bb%#OXUN9YU}xg&dZivnpvU_DvFmMlR& z1g-+b^_s{52%oLP4rG}A$>IA+&EBg0{_fVQx_dr^d+N;b!2$DP6Dh-5G>tb*daxF3 zexKxn8=`a%Bz%Vc|F5Ij!fkBzWV1ac`x5JwSmm8V` zuUb0l)75L&k2PXtVfA6pC!NaO<;?Eh1zSd$za4M5qjy9uH=|ggrE60DqX-Kfwx-p! zRS{547cQ06D=))7@u~*R5{7u!9X~aw#ki^Yj3*W>M*OH)j2Ud&+9jyrYBTZSRM@_< za++Ng+y-Jx9T{YLA;byH=QY}IQ&l4Z7)$nV1M7mjP0lWyz8ohUe?B%7^MC`#r?Rc1 z*Ge2B&PpLU5za0Hd%k0J2Y$-yJo}*}eyZ?1Mp0EoYV+dIy5ALcPMovaS9kO<)eL&7pQB0fzmX9z(rh$=>2&Ew0*pm*bLbx)522S4 zhK3bsQ3%Lq+WDVl&eNzjRp}!vM|53xX|#^&8tC2qqUk?b<>e-QIc1h-N>cYawVqK~ zDH?i+apL80?dFozV3GuMFIX#6iIw_84(Um$w`jA+tYq0ip62CySMiE*m*S14{-%oTmf>I-W_1C*XoZVLp%UC}u*D#Q6-9E&0uO)qLf1 z{p;)`{?p>M8#dAUa4X+WDfMA)U6r%4G?A0y`WxC(0w?>~@5>D0^*R!l&fKcscyzv| z2JRlM?_~Ia$srn~@ij7^3a+(ZUrk7tf1x3AhX~n^6r?#UBPSEV6d5>!e|UN3#@KicRQVQ1%I{yqL<;?x&MOK#lQxk ziS%OkrI{6YBlY``vfp8e-|~2^tMtuH?J8)Ii`!w0q?UOmqM1RiUf`~IGGLjXyuO;M z&=1mV@;|1(^EP^MiErwS1Y6g9_}~`|R=ohVj@Rtwfdn(4fkIDZRIvXvv)?O97o~&} z0t={%@$<EW-Qi(Jd?K3Mzx literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.pem b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.pem new file mode 100644 index 000000000..eacf55c65 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: server2.example.com + localKeyID: 69 B2 C3 8A B6 1C C2 19 F4 1B 4E 74 28 AF 12 89 E8 2E D9 BE +subject=/CN=server2.example.com +issuer=/O=example.com/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAzCCAa2gAwIBAgICAMkwDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5jb20xGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDFaFw0zODAxMDExMjM0MDFaMB4xHDAaBgNVBAMTE3NlcnZlcjIuZXhhbXBs +ZS5jb20wXDANBgkqhkiG9w0BAQEFAANLADBIAkEA2TCJENbO0UK+Cjs2HSqq1OlM +VIJQs/ctua3DEcPOphjNwLrUqVGv5qkWFDHbsJ00hpiW7uK9tDfawSWmcFis1wID +AQABo4G/MIG8MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +LmNvbS9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5jb20vMB4GA1UdEQQXMBWCE3NlcnZlcjIuZXhhbXBs +ZS5jb20wDQYJKoZIhvcNAQEFBQADQQCeF6NprEufUaSaqXhBk7hP7kX2NtTEkHmg +hm1yvEzKL1/7gmqhMAGFapGV90k/8J6L4FiIEaxIHuTvm94KfKZi +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.unlocked.key b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.unlocked.key new file mode 100644 index 000000000..6e0c41e7a --- /dev/null +++ b/test/aux-fixed/exim-ca/example.com/server2.example.com/server2.example.com.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBOQIBAAJBANkwiRDWztFCvgo7Nh0qqtTpTFSCULP3LbmtwxHDzqYYzcC61KlR +r+apFhQx27CdNIaYlu7ivbQ32sElpnBYrNcCAwEAAQJAAT7+ClKxLRIs9PISBWjR +Qhd0kKeOvvmUEZSlodx1uw42qqDQ0vfYMSOWzn8dlGQ/XGJ4xVwvFFklNCfWva4M +QQIhAPaoF/TqmR/dc2CLsQkWoZQqdu7w+uBnTnqqcQ1A2ci9AiEA4Wqw3SszsAwV +ELV+DCDouyncyMmCzJkDjYA1WYNiVyMCIAc3AYRjfFknRCG11Fbct5s65sG0gNIh +k3UZGTd3ByfNAiAbwAqt75eZYKNnPzCZRaPhBrJLdaNIlL2/Ob1Xm7kLiQIgWtVa +weFGKWW86QXScrel5sjNDxFv+ZvMd+heAiPqkXs= +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/BLANK/CA.pem b/test/aux-fixed/exim-ca/example.net/BLANK/CA.pem new file mode 100644 index 000000000..bed3d2fad --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/BLANK/CA.pem @@ -0,0 +1,10 @@ +-----BEGIN CERTIFICATE----- +MIIBaTCCAROgAwIBAgIBATANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjApMRQwEgYDVQQKEwtleGFtcGxlLm5ldDERMA8GA1UEAxMIY2xp +Y2EgQ0EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAp2tm7DhEtMNQPz23MpsxYVje +SgMgmkDx8qdr97SBBVqtPcHMMrCEZ9dQiYCFxbshxXfeova+DbLZISDlHA9xjQID +AQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjANBgkq +hkiG9w0BAQUFAANBAG/rfiV0UE6Q//VIKN5CprvNXDGQFfcFCWNRCu6ZGTPpaDf2 +iPqVISD9trZrvtlUIgKjGgOQQbdNH9RBj5+6QKo= +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/BLANK/Signer.pem b/test/aux-fixed/exim-ca/example.net/BLANK/Signer.pem new file mode 100644 index 000000000..5d2b2ea83 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/BLANK/Signer.pem @@ -0,0 +1,11 @@ +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjAzMRQwEgYDVQQKEwtleGFtcGxlLm5ldDEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAN9lXg/7R2gY +392B325b/0eHLOrQG1px0aPuSwCBG0cKwCATtsKjYne15vNXAskVAdejY0Ujvo+a +d4jVi2qYJ8sCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm5ldC9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EAlm29nFrjiJPaldOtHxpmWzE3Zxit +Sl4RxdeJcJ7aGL2gDOAWmiVh6UPbMm/o6Vg2PxHp2YviOhVunp1C2t85ow== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/BLANK/cert8.db b/test/aux-fixed/exim-ca/example.net/BLANK/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..0d794a0752eff6b5d1c421fbcb65f3af9106bbca GIT binary patch literal 65536 zcmeI*e`p(J9LMqR-6b)rW~GbmventtS?7<@-X-dOK)7aAT2_<}f0b+$Vo2NAHto8T z&Oa0@T04rYAeC8l76TTPg2?Q|vEmOZhzkCsv|=j`#i|UPx`Hz5T{BoVH#B2RVef;7 z=kB@VdG2{}|9(Fwp5nNOs3NYcIE(;=n00IagfB*srAbqCcjj?B*ZQ zR7F)4MfZ7@-Pl*xx8PG0w_EfZj4SmO9_=1if&cR4?s!L6d$KZ}w2UIX&>7YI-b8yU z5f9cx^{ZF-1}v_O!;YD2pzy?y);(>&xvOttoWIT(*WM_Z@5sEh?QqJyKyc+&Q@T zd)@W3TV6i&@eX6Kc)`6av8~|fv#Y}Mts9Q_|1ne^JTX4rHZgtoHEL$HHW)p4N7)zA zy)V91{Yp);+e$UtTvjp|eb8#{>`qw^iM{f_SN7V!xW6fn=hd^X>D5FO@rm4(YDuTk zEkWlok@X^K9+PW&_#B@{slF=vd928O9=XeS?eKtmlij;gooVsNG4oAxzPW1_(MRG;hT$`+VQHWmI^+Zverx_2(UeX;h*^*?@6 z8r%74=4ie2mev-$9rTaCo4LQ|jqiWGPyL`+naU(?UpujPxTpWifd}@j`!Jg=5Yrp~ zmLuTgC!C%&AbQ9dD|6YU{QA0)ijlQ_<*k<0wYjP)(cNB|6SPp(ZifZzvMTN2Ga&6e zf@eAoKOZ~N|Mbkz=VN87o3|SqS^{HRn~El<_H^x^2^=1|;+vA;iuioZSE0@y<{NJ{ zi{_^XzTI4$-v7dunYm4w+^T$0@~QlHVhC3-VV7DT zAfhP(ik+PZS_m3J&%M(pus8|)2ZkMH7H0XCE7@^JM218%U6Cp?rLK?WPn7*JwRe8nJB}iI(+R`v zpte+US3GxJEqJwXHK-2CKLzhZ009ILKmY**5I_I{1Q0*~fxioUrt_b{76cGL009IL RKmY**5I_I{1Q7T~fo~)wp+x`y literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/BLANK/pwdfile b/test/aux-fixed/exim-ca/example.net/BLANK/pwdfile new file mode 100644 index 000000000..8b1378917 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/BLANK/pwdfile @@ -0,0 +1 @@ + diff --git a/test/aux-fixed/exim-ca/example.net/BLANK/secmod.db b/test/aux-fixed/exim-ca/example.net/BLANK/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..8a8319376946a7d06786ae3f5eea38de6da69169 GIT binary patch literal 16384 zcmeI&!Aiq07{Kw*O~wu~y?7G|c*srI0~FDDk?I)K7pQGE%4R#d4)ow-c-L1FJnt}H zLuT4cbO?f%G35V2Nb)89lK#$-#(pRwHIeNXkv%(<9g!{Dl}(z^{TIy+@{C$ zVQzC}lzYmy_Gr5Mto>XLL;wK<5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 zU{eHY^0qr`y|!kpO}P>GKmY**5I_I{1Q0*~0R#|0;O_zrQ8Hh7AMV>Cv28AS& +-----BEGIN PRIVATE KEY----- +MIIBVQIBADANBgkqhkiG9w0BAQEFAASCAT8wggE7AgEAAkEAsT/jRe87h2kyfvbt +YbvgOPS3y6+BPP8pVdU2CefZAy4mYhuj4ZejZgOf8W9XoonCKTW0Y31feBcy0cM+ +2TNM3QIDAQABAkEApPyuBevggnP2T95zKfUiioGoD43HA8sTY9T53xCTnPOrNNCv +Vn5+ZXao86JF3ly2jY8Eg0b1hFpfZsZMhG/PgQIhAOg/SgSXqPL8oON/Uot1IUHe +xLfwqW4toMwTknwdWO39AiEAw2ClhCYw/YTDdbh8sstP7k9HDNBPynwAuURLqc6/ +oGECIBDxVQgCvFuFnIMcLbxovhVdGALHNsUH5RweLWiKh4tNAiBSgpVD6tETr6bQ +J1paM6yM6uQJkEuyKo4vr5z4mHyq4QIhAMtfRG4+QspRY6aaAAebWBS4zwDiAZCH +6bnyjSzbUHsm +-----END PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/CA/OCSP.p12 b/test/aux-fixed/exim-ca/example.net/CA/OCSP.p12 new file mode 100644 index 0000000000000000000000000000000000000000..4ebddda7a906547250ed84ae4def607f08560ac5 GIT binary patch literal 2218 zcmZvdXHXN05`_~;D2Cn%(hUeA2BnEeZ%RUtYUoPyQUZ|@IuSKW5m7*t-Y*~!kS4vC zPzB-9n*`|{B3|0VSA8>YXLf&_+1)?inK^Jg6_6T^r=gc5=n;M}0%?Ki_)BefGp|i#?d#o`AfxYO7Isf@TN1>c zZLWzswy8YYX-ZqhUd!%N4v>UjoWp7hDlAigR|6w1K0GGIhraF}+!E_h*b-L8nZ~Dv z_0&xVd)a$Y7+>v-4PSK6BrUNV2oFB2Wq>rb$BQ&W$4=$r4)rT@YS+2Xs=PfHYG8Mn zIW!{}PSEbJydMp=U6##p47$yoEUiQBxenlpR7Unjun==8<<514){dX>`B^Nb=qB>k#0XetZ37>;O+ypU1NjRIGQ4<7Z>qOCi&3G6*>A zKTzp8WOxL)04RVaz!+c%5IUcK0Gt6BfFs~BT=c(doHAS>4z34$bec^}ZA4_?ia7sT z$tZZm2k?*j-48VB=k}li0)E$k|AU|A7ybvA*_th%#C4n`l8Iun$^pOdr=QykJZ9lO znDCiJp+r=}SNbeDjiiyk_&(~k`Vqig+i>?ng)C2kuR3cTGH z`)A1hTr^SnmBtTD_(m%yN!$ooOVNnqdrMuGVuCz6Tp!U(737(^J$etR*K5tW->Jur zjwf8SNrk#a(PS-i4wy7~tPCw455=tpU-sW+@poq7ej0AJ&B$fN1C_^drYbk~0 znz+fYYZl!Rij2%VeypP7O&+L-C5V>)ISoy}AshwL zddB&!7Z6_9q@=R!6NOM`8tA&Od*yKbL?gG9I4}A&=Qvi7_nO*7ryNv}18| zf9>&*{T$y*zHD^Bb^Nx2!YyrCj)AE`3}zUc_UNr6COIR<8Gfb^eiq&GE>L`Ttlv{& zToUr)%AL2iqvkj6WYZ_Y*Fp3=&(5N)wK?}lNMRiK3F}2?bd;dq3zD>kjL{#HAz2PJ zeWKklB3ePzFbnhi>cZ3(`6$TsdoFE;#FeG%0rOKBK!mKaU13EDvSDOsiVX9Qs_DZ* z&#c|i24C?=qQG?#djkW+*IM#%;TC};zLVPCRK|3o$V@sLR?T9(AJVF7ldzYdY$2p} zb<$K-Cr1e4S-P+`FVCAx36#+i715M5nm{Wn#vIb^E!34ASf7=;DN$s!i!3h)<(kau z?>D_AV5y)syh00ETM-I%+g2rcy>Xq=BP#E?b47aAq&BV^Rcl|Xs8|04m-XtwOEf&t zjfALec6$Yyq4HBYp?(R0g7n-sLZT}*d$HhS{|`iT zL|bN+E^?cT*gGhe45+mp4BibNIAz2hmFuC4G4K>0m+!O~HrJf})_yu)+m|oZiqu>T zNEM}$j3r%S8sQbY2MOcV!){}GuWQw-$p>{4J#_EN@9h*I8<(+K{Cii=6>Vp!W? zX9HXBPc4F;jBiZqATd99GV|q0Z#L}>=IgD<%HAqyWp`up0vNgF6w>nq-1x@uQHQ7*o3*4r|Iny0A`_Kl}Eol$(bZHY6ta>P{?z%Y00{ac`jbgil9 z*^dLfHsT3|v~1f@=S8|Wof@mfjmLlMVL$XdA%@-@@NK+Zx#x);7FWMIO@kU{?zGalMf_H+wQyQxgotcTZbUz#b1bZ|h?r0tu-Ye!+D(q|KMVKvN z)3TlPDZQB?ej5<~jxRW#s)g<6PpbVGDSu5UEGXSh>s=Sv!F{ud(W$X#q&C*_W<1_# z>2I)rS=i3M)?IETAIXh5+y{qKfbTx-s|H;%P@4|bF_|RyE`V%bS32iMLr FzXJpu78L*h literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/CA/OCSP.pem b/test/aux-fixed/exim-ca/example.net/CA/OCSP.pem new file mode 100644 index 000000000..2d71376a7 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/CA/OCSP.pem @@ -0,0 +1,11 @@ +-----BEGIN CERTIFICATE----- +MIIBgDCCASqgAwIBAgIBAzANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwM1oXDTM4MDEwMTEyMzQwM1owMjEUMBIGA1UEChMLZXhhbXBsZS5uZXQxGjAY +BgNVBAMTEWNsaWNhIE9DU1AgU2lnbmVyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJB +ALE/40XvO4dpMn727WG74Dj0t8uvgTz/KVXVNgnn2QMuJmIbo+GXo2YDn/FvV6KJ +wik1tGN9X3gXMtHDPtkzTN0CAwEAAaMqMCgwDgYDVR0PAQH/BAQDAgeAMBYGA1Ud +JQEB/wQMMAoGCCsGAQUFBwMJMA0GCSqGSIb3DQEBBQUAA0EAjPHbFyZJZHxLSqn5 +i4i7+sWFAueHbbVXyDkzbspOeAbUeuc+lyZ7gMkRofbfIyXIMzSggVKiBetK5gf8 +OhXNJA== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/CA/Signer.pem b/test/aux-fixed/exim-ca/example.net/CA/Signer.pem new file mode 100644 index 000000000..5d2b2ea83 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/CA/Signer.pem @@ -0,0 +1,11 @@ +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjAzMRQwEgYDVQQKEwtleGFtcGxlLm5ldDEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAN9lXg/7R2gY +392B325b/0eHLOrQG1px0aPuSwCBG0cKwCATtsKjYne15vNXAskVAdejY0Ujvo+a +d4jVi2qYJ8sCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm5ldC9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EAlm29nFrjiJPaldOtHxpmWzE3Zxit +Sl4RxdeJcJ7aGL2gDOAWmiVh6UPbMm/o6Vg2PxHp2YviOhVunp1C2t85ow== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/CA/ca.conf b/test/aux-fixed/exim-ca/example.net/CA/ca.conf new file mode 100644 index 000000000..d162ea323 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/CA/ca.conf @@ -0,0 +1,18 @@ +; Config::Simple 4.59 +; Thu Nov 1 12:34:03 2012 + +[CLICA] +crl_url=http://crl.example.net/latest.crl +crl_signer=Signing Cert +level=1 +signer=Signing Cert +ocsp_signer=OCSP Signer +ocsp_url=http://oscp/example.net/ + +[CA] +org=example.net +subject=clica CA +name=Certificate Authority +bits=512 + + diff --git a/test/aux-fixed/exim-ca/example.net/CA/cert8.db b/test/aux-fixed/exim-ca/example.net/CA/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..6a130c8e771a65c1ff49588d88203d910c0e2dba GIT binary patch literal 65536 zcmeI*c~leE9tZF{ldww4LkS>A4I+XYOcM4jShOm1!B(qas|PV4B8wp{V$~-+#RV<4 z){V*{SgE3-7PT$Koj%Z3iyI;$_^?%KThvIEwJz!tgY!GPfH7^l+?(wRGxlQan_rv`S zcYEqT#@hZo^>)!91Rwwb2tWV=5P$##AOHafKmY;|fB*y_009U<00Izz00bZa0SG_< z0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_009U<00Izz00bZa0SG|g&l0dDcNDi2 z^@?qZ`HJfSUj(QF6am-$Px#OBALeiEOZnFMeC`wJ^OBFVPmA{v&jQcUo^nr-=P3`7 zXDfan009U<00Izz00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_009U< z00Izz00bZa0SG_<0uX=z1Rwwb2teRz2^h0q-|E2hmD)3QhJtZIK`%??tfW|#a;nT# zIV&F;)td9!0TC<7u0CCn&# z7^%Fyc64pj;glPy)TyO6*UnwCpx2bocZ|JMlQ>Q!YdWY%TvHcCk7~-Z8)UXTW8+Z2 zUkq!qjdQAF*3G{Uo`E0lq z6lXrK>hfX#WjXJ?_3HcO|6I3SvAJJa(SflKSBmN#?iTl4-4a;jxi?>$;Ggor`cSdC zp>mU%qkmbsu2$F)s^1{wDnr6NFYUwFvLA%4j9$q~)jLWRzc6%cdt4W7RU_@_N{A;R zF?tP2ep%?+dDm)gBjI&{*0qs5E-7P8NeS7K+O91rD!S9L(yROWR1~k@-Bwgdyj|~* zxQ|o9Y{M1e#P^*iE5&)OyT+(?jL*1mL%e*#q1^i}M=Zkok5kQ=rK<2d6M3G#Dh{7_ zV&rh+#^}aT>z?6?;sf#LJ+`8HnEO?J+jNzg`sL(;vmeV27yq!-C#&*u?@MkUdJoy< zG1z3QXq?PFir%pDUrz4c6DKFdZ79zP&m9w29wB+?Y?!Qbq_D$5pIKeITv!sKtr=d= zHC3V1YqtU&HOkw!wp}wqUJZUdOta1?Rhsq$dbTI)W=XSUY_v0lg?35n(4MvrB0@SY zbA$|GzdoHA*v;-N7<29JjJ3N99;RQ1xxzk2CXfkKJh5VnI+nflYAbB2b7BAS&U7kg zIe&qaM?Asj>b9_p;-Y`_9$tDlOcAhG_K`Gl!o?7QBs=KF&7!zFrD+Bc+X4=LE!(jm zrY3C3{Dl=|4izaE3vTZd?W%Qw3$Zr+M98d~cP5jv_w^`I+d_3|8Zq*MrYURKRiTe z-EA7P=VEUtRmri52}D9pD;6qJ6ak8VC_)1Q0}KL=`%C@q`JVFL=e^E5#k;TfRj+*> zpLnEugn0CmQ}WHSm9lu5hs>0@>Xzje?w0I2)HT`l&$=1`_5%S3KmY;|fB*y_009U< z00Izz00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_009U<00Ms_0b?N{ z4TLah7nrm~+`r!QgDQIEFl@|aj8x7@WnNMbnY-L8f*HzK(o}TU?P4wy*mX0%5A47D zyM?t*{rAz)tTQggORqhSeCbG09{V#6Qm2rJ z2OAP$LzV1-(}XHLB6ulET>#xiLyo-azO-pl??rQ`UwCk0>95xu>no0!4*hNQ2l+8B z)4dK9zIZp!q0mK{pS5B3z#_?BSzPGCz|lF2zPvy2B)x9#vR|LY%$H7}F2lI0ICr;! z(t>t6aJkXq1F321zU%uxn^k)Hbk>DWKAX~#9{;w{9>eJe8dGC;`%7vvXJp$Z#tmgA z+Ry&2ddjseiDkN4VN;a)4Z>~{iM)Z>o=D_vY|BwT3XJhz)D%XQo`vx{sm{lBVMHw1 zbg_Ugf>n#o2IXCoHsw) zEINHm-|ZaW)M6|Z@4Jvh?&!>qQl*w3VW$jT$1t(PuYB+E>m{( z8O!A<+w0y8D{LIH>Ey{nGcM&_65kv$swKDP#h@ZmKfq`8NL6b=_SFTG*4#Unx5LY6 zsk_tm^Nv65$!zU!WaFZ1_z+6Jl=-9c5uMpzF1@Z_{Fi?^qHE_|S?EgK^YCb0>EXu{ zwxMRirr8O5Yg@!s`4<%h|7s9j=WAZCyRC^srS)s8U0sGZe>ZRV#jv>_4jnOLgiDa5 zXyz*Qw7YKwYz<0wFIe6qmE;u)N;`957r zBDmkBfpv_$B*(<_wa^xiF}s8#zS(uHzn5>o6=HME-fm3pn((~96~{}{K7X&+=!9TP zQtNX+XTDu^+Q>_2;5NHd*D#^AOYj$ruC7sPJrd{L zj<}tQrV%ZEi(+N-ZvPZn*64j}@3E3J|JH%y&Ul(!sTH^mm||CWX-#3YAn!)v_<|*e z26~i6&7C~UT2_5HuvY$3y>=EJ#JKR!4~*tBR@|Dbx%h|~W7>X+5P?Z2A$BcZcB9UE z!04%SLPIwHH*;~>y^4kOl|}Kp$5;Bu6OO(z%kcEb{P3+^#LVi#pF>HS-AK~|l3sfb z6;4Un{rxZF=_)Z*Qy4YEabH$;%HlJb)7Ls5(+-FTW&(deuz`B+xGhHT! z)$!%)BbpYkJiqGHw!XH}6Qy1;HrqlbSya?4NysC%f_kI=F#?@mywZ`mBGN+P{crpjX9KsOPD*gA~ClhCsi*mwZu@` zKoTU%EG(3qlbM{T5S*EwmzkHY;G9}iBEfHDU}$V$Xk>0^YGh(;5`|_cvm?Wt!nE%u{xBX9@sJwl<>x literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/CA/crl.empty.in.txt b/test/aux-fixed/exim-ca/example.net/CA/crl.empty.in.txt new file mode 100644 index 000000000..250311c00 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/CA/crl.empty.in.txt @@ -0,0 +1 @@ +update=20130127152434Z diff --git a/test/aux-fixed/exim-ca/example.net/CA/crl.empty.pem b/test/aux-fixed/exim-ca/example.net/CA/crl.empty.pem new file mode 100644 index 000000000..8236f8598 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/CA/crl.empty.pem @@ -0,0 +1,6 @@ +-----BEGIN X509 CRL----- +MIGsMFgCAQEwDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhhbXBsZS5uZXQx +GzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydBgPMjAxMzAxMjcxNTI0MzRaMA0G +CSqGSIb3DQEBBQUAA0EAnGNQN1GnKB2PGg9C+vguhNlTRLgf9j9lziLPBkPff4+k +8JLTVhcuQYnYTdw1WKq/DeXJRyZwd7Z8vAMMdsW5ZA== +-----END X509 CRL----- diff --git a/test/aux-fixed/exim-ca/example.net/CA/crl.v2 b/test/aux-fixed/exim-ca/example.net/CA/crl.v2 new file mode 100644 index 0000000000000000000000000000000000000000..7473ce83b8e621cfb2f8a83f07dda98f9c0bf4a2 GIT binary patch literal 223 zcmXqLykpSV&cw)Qz{|#|)#lOmotKf3m6gH3*ighkh>bavg-e(_wIVUMASYEXFSW!_ z+CUN{$}B9DoRgWHs1Tf)o|l=IuHc+nR3gD|WMF7)U}$7+Xli6)Y#wExYaqhJn1(4X z%EZKQ3R4)>4a|-V`T_q_j-T=j%{X`e@)qV3?w`--S|8-dy2!in`?X8vOHw(fKaBLN g6nuQ}x|R1V8y%mb=-KIBxz20EW&YK4GtDXh02pvVfdBvi literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/CA/crl.v2.in.txt b/test/aux-fixed/exim-ca/example.net/CA/crl.v2.in.txt new file mode 100644 index 000000000..434045ffe --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/CA/crl.v2.in.txt @@ -0,0 +1,3 @@ +update=20130127152437Z +addcert 102 20130127152437Z +addcert 202 20130127152437Z diff --git a/test/aux-fixed/exim-ca/example.net/CA/crl.v2.pem b/test/aux-fixed/exim-ca/example.net/CA/crl.v2.pem new file mode 100644 index 000000000..dceb45cd1 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/CA/crl.v2.pem @@ -0,0 +1,7 @@ +-----BEGIN X509 CRL----- +MIHcMIGHAgEBMA0GCSqGSIb3DQEBBQUAMDMxFDASBgNVBAoTC2V4YW1wbGUubmV0 +MRswGQYDVQQDExJjbGljYSBTaWduaW5nIENlcnQYDzIwMTMwMTI3MTUyNDM3WjAt +MBQCAWYYDzIwMTMwMTI3MTUyNDM3WjAVAgIAyhgPMjAxMzAxMjcxNTI0MzdaMA0G +CSqGSIb3DQEBBQUAA0EAL1D/ZMfKSVVozt/TtAPIR/PMLTvBCGrRDbH31tI3pGUJ +l+FZTnkR48HXOkuaPCxMclubZ0ptQ6wXHP58iwKacA== +-----END X509 CRL----- diff --git a/test/aux-fixed/exim-ca/example.net/CA/index.revoked.txt b/test/aux-fixed/exim-ca/example.net/CA/index.revoked.txt new file mode 100644 index 000000000..b141dca6b --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/CA/index.revoked.txt @@ -0,0 +1,6 @@ +R 130110200751Z 100201142709Z,superseded 65 unknown CN=server1.example.net +R 130110200751Z 100201142709Z,superseded 66 unknown CN=revoked1.example.net +R 130110200751Z 100201142709Z,superseded 67 unknown CN=expired1.example.net +R 130110200751Z 100201142709Z,superseded c9 unknown CN=server2.example.net +R 130110200751Z 100201142709Z,superseded ca unknown CN=revoked2.example.net +R 130110200751Z 100201142709Z,superseded cb unknown CN=expired2.example.net diff --git a/test/aux-fixed/exim-ca/example.net/CA/index.valid.txt b/test/aux-fixed/exim-ca/example.net/CA/index.valid.txt new file mode 100644 index 000000000..ee52d8368 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/CA/index.valid.txt @@ -0,0 +1,6 @@ +V 130110200751Z 65 unknown CN=server1.example.net +V 130110200751Z 66 unknown CN=revoked1.example.net +V 130110200751Z 67 unknown CN=expired1.example.net +V 130110200751Z c9 unknown CN=server2.example.net +V 130110200751Z ca unknown CN=revoked2.example.net +V 130110200751Z cb unknown CN=expired2.example.net diff --git a/test/aux-fixed/exim-ca/example.net/CA/key3.db b/test/aux-fixed/exim-ca/example.net/CA/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..e17cadfbbedd8fca74b0c1e9819864ea1293777c GIT binary patch literal 16384 zcmeI%XHZj1!w2vrv=B-JLYJmerGtus1PMh1=|#GM(0h>pCLp~FO0OcI^de1=OE1y| zqy?mRkX{9W_j+I7nfu9)&&=~qcIM3PoZXo{^ZU=v*|P^gOp62n03ZN>a0mdn@^=$J z4gdiEu6|tr@bAXo{r}t`_^1A->(@8{Fy0Zn@OS;I{2KG?`i~dz|31%ud|v#7cmccs zUH~tE7r+bP1@HoR0lWZS055Lw*bN4e+7j7fiH!5h{^bZ9|j*&0Lh7f1j3AjuxCTG z0#au$EgUG{kCtQhm0GuJpdcWS&>#3zf7$eGT#HX2_dH}3loRhx9y9^3xTRcBb3&JT z%_HgMW{r2`d|{rV*?aGrd-X5xmTpj;S2f-XYZDtMZqNv(Pa`)$REMLrO)Lvi3u`(D zGd2a*jvQk$T9_E*EpT#i95K>;U}~f}pj3`hY^(ppCHz4a+*zwjTX4?ehu~hF7`=Z_ z4g1f(C@tPY(w4SU$YW4cl{mqtF@uFcH`-8RgC&`nbZwPXVLSAmE}z>>G#e1Py)b)Z z+^S5HZ61{+RHuLXi?a;yeT*`rpaM97 zGkYl1O*;G7Jm7P+t9D{Yv*dZG$%c_w3yt|V$tX~g>1IU;OT%B@aV0Tu4(J_2rUPoC zpgel=5~XJkx~2xxmjE#4wwwpB%m7KmmnPwrq7BW(X0<=(+SJ6u7fcvKu(sdMzl0xdT%T%hg9!Xgc%5m*V|%A5TjAslM>dZ| zX7pQc-dy&NqISwb(n{$ef1Mc)fs(P2hkr;lG*>l#B7>uatgU0Z)qMKSxm)qU?^Flk zs|@#BpsCEW!%ON~=*6k^_yj)~!BeeILrmaQwT{Nd7ipb)&B03B_qF9T6(b*kRdmM& zrtGaNT~E~0?{hY195xhY zsM*dhRt|WZOM$)He3gkKv4gVcO7?~hB)@no?X!wjRHnq0=CiSJ)R`q|puiEwYyQHA z8^dKj7BM8>^ctrybdx9F(aoLQBUR*+RU!g?)jj{?h2{i9V0^QBS0WrNhcXrpJDTQbh^Xz_M@cN-yoqEiKiB-xnip=rkMgC zkkh1hR=EcAv0HXIMgEz#S2>&Axq(|-@7Ll-V$z^mj^&dKjJQ~EX*mJm^ya}Iqft@+x5qzwkEEV&_GpwldC`k!t-iqFJ^+Hwd zC1Jw?Y0PTNwCBd0bSOj@n&D1~ljfj@3vZbD$fJUD1SI!~$5O!QgEkID-*OEwXWM^B zRSHHq9PK2`txg^Y+?K(Dlo3klzf*;bgBALz?+85!w~-|Tk)~BEf~@@8x#%l-)7nUf z14e1Vl)=r$SSO*lxUK}vu7%f18OqwrLfi?8vAUyyA{q~mZb^X0TdTzGnPa9BNO!ru zF9eTMeNo)M`cdGvY4XnM9W50%3eWpD%}G#c5(wtcb}r%QwhJ$L5#h4QW=I(CMaj!@ zdA1l<-o9zW+te4Y!vz_MX4IvK(H60B9gWJ6fU=PC)c%+NQQw<7+D;jxoKDoMSt%O6 zk?~!MrpI0U)X6eRUO&M;sdCKJl`@)qirE?K`nk@bi^R*{F@li-ve@f?ustP9i*49d4d-%WajdfUY(1@-A=Gtt3?7u5H4evo%ON<<^{)GIXl+ zo|b47pLchK({`R%xg=IenTXM(uu0t|!SV$gMVZ1DF+2&kAa1SU9KD$jzb3(UPc%hI z^s(Xh{bmmmQ5LoIpHwBc`p=dN>sMcH(iLBc9f)Mr<;D)uo_+LTMJgUTL~7=Dsmr<> z_w^H(R~DIU1)%5{5(CmXcBYkuU_Vv-iy4TA1p@b9rLXk}V&c#B9ymCVgAo@sx0>IH z241p0Pbt+8BZIP{tX>hjHhe6h(JZm}oFj*dw zka;ejCvdxCM@Ycuh3}N&x~G-BlNr)pzzu2dP5=XH2hQCSRvDTeACD^Z_7F-z*C^Wq z{{0Sy6fv)iHBi=lye_XcFTHEyjC6BDJGr6+%&jfV?Fe)&T-|J(93g-vC?DlIg*G{i z+y^2J$pc%1hlp#4hlu}MPB8G#i5I{N;05pkc!6I6f7lS!Z%q*m5N>F9x5GFUP*w)E zhbP$I8zPhQ-D*|;y*IH9Ro5qWPqf!@5h`7~-{c;S{Xt3Iy0wn40gQ^7dq38-3~y#JVj#Ibmy+&dPz!Bzq}!`D?IVlJ7@KxYPRo|w$g30wZsqe^|59 zzL{pb4b2edu%6%`WZ-0YZ<{vj^CE@Z(qDtE1Z~CBbBU=`%4sKmUSfdTgSvMlOBN=c z?;w!eanXNBRUWzWqwzz;l?Yx2oVVcg`s@{*7T-~Vh z`Wg(ZhCSCM-rf4d_b3E=M%yl=pnChe)PD_ti#;i&gJFK>2-Q|$4_(xks zcLrV~woOy5-tJxmJFh3PxY`_7WN)PU6rM#l+uN^(;()#PWMZRc&8uRg#R5H(u)qZ zO5?;-rv9*22^oi-QPD8ppM{m*W#6v~aTHF={9dcF1n`kPnanH@s2vf@^4TMN+BR)Z zi(|oIaZ8)FYh8FJA*uMXq@|$pWnVcpzi9|fc;z*JFoysj_k3XHCQ<0vFz;qT!Q5r%Zp0gd5S`sRD0N) zTmh)3h=U#8JHf?ed>lczD7U(9!Eh3`MH*8wi{9lN*g!+zeEVtUq5|o9CfVfIIyv&{ zGA=3GS1ulO)Za*B*CGd)>hc$kXDm#hXNuMgGgE#uj)s?tA^htD%myxl*;~p0KW0Tp z6FW_HOST!hYI$D|)I|#%%Qlz4-VmLF4jqZGP2%qPL#p(u3ty92Pa*~4)}qJI!rjl7 zZX5kh)#JRVJ^)m}a?rQ8e$D@p46tE_1;cBXIz=^?tn zT_z(h_hh`ADk3F|+RO?W+cTQjAbJEdZ*81SPu4qQGU5%2&u-ugD)_!}G$Uqr$=U0= z6wG~*frd+0fj3!D#3eG{o#DO%M-&liT6Efc?Su+>%kYEM5<^M*EAf_%L==bS#LLQQ zs)78PHT+F6a}B~t`3YpD;y&HwGRcXW`E*h8{tR#FHHhDys6Eh^yn6|aw|G16rKYB* zsH;msd-q1I{PYuAG#}GZ4Er&PV~F5o*+}hgdY@}&`CUS; zvQ-^^|D$NC2=dAFBLemmncclyyW>hfB7@@l&Ap;!fmUPcVK0K(>p0rc(^*Fi6y-P$ u_NA*(m#Fi9pXTG+cmccsUH~tE7r+bP1@HoR0lWZS055 : tunables : slabdata +bridge_fdb_cache 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +fuse_request 0 0 632 6 1 : tunables 54 27 8 : slabdata 0 0 0 +fuse_inode 0 0 768 5 1 : tunables 54 27 8 : slabdata 0 0 0 +rpc_buffers 8 8 2048 2 1 : tunables 24 12 8 : slabdata 4 4 0 +rpc_tasks 8 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +rpc_inode_cache 8 8 832 4 1 : tunables 54 27 8 : slabdata 2 2 0 +hgfsInodeCache 1 6 640 6 1 : tunables 54 27 8 : slabdata 1 1 0 +AF_VMCI 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +nf_conntrack_expect 0 0 240 16 1 : tunables 120 60 8 : slabdata 0 0 0 +nf_conntrack_ffffffff8200cec0 11 26 304 13 1 : tunables 54 27 8 : slabdata 2 2 0 +fib6_nodes 22 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0 +ip6_dst_cache 13 30 384 10 1 : tunables 54 27 8 : slabdata 3 3 0 +ndisc_cache 1 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +ip6_mrt_cache 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +RAWv6 67 68 1024 4 1 : tunables 54 27 8 : slabdata 17 17 0 +UDPLITEv6 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +UDPv6 4 4 1024 4 1 : tunables 54 27 8 : slabdata 1 1 0 +tw_sock_TCPv6 0 0 320 12 1 : tunables 54 27 8 : slabdata 0 0 0 +request_sock_TCPv6 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +TCPv6 9 10 1856 2 1 : tunables 24 12 8 : slabdata 5 5 0 +jbd2_1k 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +avtab_node 502203 502416 24 144 1 : tunables 120 60 8 : slabdata 3489 3489 0 +ext4_inode_cache 74880 74880 1024 4 1 : tunables 54 27 8 : slabdata 18720 18720 0 +ext4_xattr 9 44 88 44 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_free_block_extents 32 67 56 67 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_alloc_context 28 28 136 28 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_prealloc_space 18 37 104 37 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_system_zone 0 0 40 92 1 : tunables 120 60 8 : slabdata 0 0 0 +jbd2_journal_handle 32 144 24 144 1 : tunables 120 60 8 : slabdata 1 1 0 +jbd2_journal_head 102 102 112 34 1 : tunables 120 60 8 : slabdata 3 3 0 +jbd2_revoke_table 4 202 16 202 1 : tunables 120 60 8 : slabdata 1 1 0 +jbd2_revoke_record 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +dm_crypt_io 50 50 152 25 1 : tunables 120 60 8 : slabdata 2 2 0 +sd_ext_cdb 2 112 32 112 1 : tunables 120 60 8 : slabdata 1 1 0 +scsi_sense_cache 22 60 128 30 1 : tunables 120 60 8 : slabdata 2 2 0 +scsi_cmd_cache 23 45 256 15 1 : tunables 120 60 8 : slabdata 3 3 0 +dm_raid1_read_record 0 0 1064 7 2 : tunables 24 12 8 : slabdata 0 0 0 +kcopyd_job 0 0 3240 2 2 : tunables 24 12 8 : slabdata 0 0 0 +io 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +dm_uevent 0 0 2608 3 2 : tunables 24 12 8 : slabdata 0 0 0 +dm_rq_clone_bio_info 0 0 16 202 1 : tunables 120 60 8 : slabdata 0 0 0 +dm_rq_target_io 0 0 392 10 1 : tunables 54 27 8 : slabdata 0 0 0 +dm_target_io 844 864 24 144 1 : tunables 120 60 8 : slabdata 6 6 0 +dm_io 828 828 40 92 1 : tunables 120 60 8 : slabdata 9 9 0 +flow_cache 0 0 96 40 1 : tunables 120 60 8 : slabdata 0 0 0 +uhci_urb_priv 6 67 56 67 1 : tunables 120 60 8 : slabdata 1 1 0 +cfq_io_context 4 28 136 28 1 : tunables 120 60 8 : slabdata 1 1 0 +cfq_queue 5 16 240 16 1 : tunables 120 60 8 : slabdata 1 1 0 +bsg_cmd 0 0 312 12 1 : tunables 54 27 8 : slabdata 0 0 0 +mqueue_inode_cache 1 4 896 4 1 : tunables 54 27 8 : slabdata 1 1 0 +isofs_inode_cache 0 0 640 6 1 : tunables 54 27 8 : slabdata 0 0 0 +hugetlbfs_inode_cache 1 6 608 6 1 : tunables 54 27 8 : slabdata 1 1 0 +dquot 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +kioctx 0 0 384 10 1 : tunables 54 27 8 : slabdata 0 0 0 +kiocb 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +inotify_event_private_data 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +inotify_inode_mark_entry 186 204 112 34 1 : tunables 120 60 8 : slabdata 6 6 0 +dnotify_mark_entry 1 34 112 34 1 : tunables 120 60 8 : slabdata 1 1 0 +dnotify_struct 1 112 32 112 1 : tunables 120 60 8 : slabdata 1 1 0 +fasync_cache 6 144 24 144 1 : tunables 120 60 8 : slabdata 1 1 0 +khugepaged_mm_slot 83 92 40 92 1 : tunables 120 60 8 : slabdata 1 1 0 +ksm_mm_slot 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +ksm_stable_node 0 0 40 92 1 : tunables 120 60 8 : slabdata 0 0 0 +ksm_rmap_item 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +utrace_engine 0 0 56 67 1 : tunables 120 60 8 : slabdata 0 0 0 +utrace 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +pid_namespace 0 0 2120 3 2 : tunables 24 12 8 : slabdata 0 0 0 +nsproxy 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +posix_timers_cache 0 0 176 22 1 : tunables 120 60 8 : slabdata 0 0 0 +uid_cache 10 60 128 30 1 : tunables 120 60 8 : slabdata 2 2 0 +UNIX 459 480 768 5 1 : tunables 54 27 8 : slabdata 96 96 0 +ip_mrt_cache 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +UDP-Lite 0 0 832 9 2 : tunables 54 27 8 : slabdata 0 0 0 +tcp_bind_bucket 15 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0 +inet_peer_cache 4 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0 +secpath_cache 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +xfrm_dst_cache 0 0 384 10 1 : tunables 54 27 8 : slabdata 0 0 0 +ip_fib_alias 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +ip_fib_hash 10 106 72 53 1 : tunables 120 60 8 : slabdata 2 2 0 +ip_dst_cache 29 50 384 10 1 : tunables 54 27 8 : slabdata 5 5 0 +arp_cache 4 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +RAW 65 72 832 9 2 : tunables 54 27 8 : slabdata 8 8 0 +UDP 6 18 832 9 2 : tunables 54 27 8 : slabdata 2 2 0 +tw_sock_TCP 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +request_sock_TCP 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +TCP 20 24 1664 4 2 : tunables 24 12 8 : slabdata 6 6 0 +eventpoll_pwq 126 212 72 53 1 : tunables 120 60 8 : slabdata 4 4 0 +eventpoll_epi 126 180 128 30 1 : tunables 120 60 8 : slabdata 6 6 0 +sgpool-128 2 2 4096 1 1 : tunables 24 12 8 : slabdata 2 2 0 +sgpool-64 2 2 2048 2 1 : tunables 24 12 8 : slabdata 1 1 0 +sgpool-32 2 4 1024 4 1 : tunables 54 27 8 : slabdata 1 1 0 +sgpool-16 2 8 512 8 1 : tunables 54 27 8 : slabdata 1 1 0 +sgpool-8 15 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +scsi_data_buffer 0 0 24 144 1 : tunables 120 60 8 : slabdata 0 0 0 +blkdev_integrity 0 0 112 34 1 : tunables 120 60 8 : slabdata 0 0 0 +blkdev_queue 29 30 2856 2 2 : tunables 24 12 8 : slabdata 15 15 0 +blkdev_requests 31 44 352 11 1 : tunables 54 27 8 : slabdata 4 4 0 +blkdev_ioc 5 48 80 48 1 : tunables 120 60 8 : slabdata 1 1 0 +fsnotify_event_holder 0 0 24 144 1 : tunables 120 60 8 : slabdata 0 0 0 +fsnotify_event 0 0 104 37 1 : tunables 120 60 8 : slabdata 0 0 0 +bio-0 180 180 192 20 1 : tunables 120 60 8 : slabdata 9 9 0 +biovec-256 66 66 4096 1 1 : tunables 24 12 8 : slabdata 66 66 0 +biovec-128 0 0 2048 2 1 : tunables 24 12 8 : slabdata 0 0 0 +biovec-64 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +biovec-16 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +bip-256 2 2 4224 1 2 : tunables 8 4 0 : slabdata 2 2 0 +bip-128 0 0 2176 3 2 : tunables 24 12 8 : slabdata 0 0 0 +bip-64 0 0 1152 7 2 : tunables 24 12 8 : slabdata 0 0 0 +bip-16 0 0 384 10 1 : tunables 54 27 8 : slabdata 0 0 0 +bip-4 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +bip-1 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +sock_inode_cache 666 685 704 5 1 : tunables 54 27 8 : slabdata 137 137 0 +skbuff_fclone_cache 42 42 512 7 1 : tunables 54 27 8 : slabdata 6 6 0 +skbuff_head_cache 302 450 256 15 1 : tunables 120 60 8 : slabdata 30 30 0 +file_lock_cache 38 44 176 22 1 : tunables 120 60 8 : slabdata 2 2 0 +net_namespace 0 0 2112 3 2 : tunables 24 12 8 : slabdata 0 0 0 +shmem_inode_cache 774 775 800 5 1 : tunables 54 27 8 : slabdata 155 155 0 +Acpi-Operand 4563 4664 72 53 1 : tunables 120 60 8 : slabdata 88 88 0 +Acpi-ParseExt 0 0 72 53 1 : tunables 120 60 8 : slabdata 0 0 0 +Acpi-Parse 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +Acpi-State 0 0 80 48 1 : tunables 120 60 8 : slabdata 0 0 0 +Acpi-Namespace 3311 3312 40 92 1 : tunables 120 60 8 : slabdata 36 36 0 +task_delay_info 332 340 112 34 1 : tunables 120 60 8 : slabdata 10 10 0 +taskstats 5 12 328 12 1 : tunables 54 27 8 : slabdata 1 1 0 +proc_inode_cache 1008 1008 640 6 1 : tunables 54 27 8 : slabdata 168 168 0 +sigqueue 35 48 160 24 1 : tunables 120 60 8 : slabdata 2 2 0 +bdev_cache 32 36 832 4 1 : tunables 54 27 8 : slabdata 9 9 0 +sysfs_dir_cache 11356 11367 144 27 1 : tunables 120 60 8 : slabdata 421 421 0 +mnt_cache 37 45 256 15 1 : tunables 120 60 8 : slabdata 3 3 0 +filp 4644 4700 192 20 1 : tunables 120 60 8 : slabdata 235 235 120 +inode_cache 6883 7308 592 6 1 : tunables 54 27 8 : slabdata 1218 1218 0 +dentry 61240 63960 192 20 1 : tunables 120 60 8 : slabdata 3198 3198 0 +names_cache 26 26 4096 1 1 : tunables 24 12 8 : slabdata 26 26 0 +avc_node 510 1239 64 59 1 : tunables 120 60 8 : slabdata 21 21 0 +selinux_inode_security 84206 86072 72 53 1 : tunables 120 60 8 : slabdata 1624 1624 0 +radix_tree_node 11606 11781 560 7 1 : tunables 54 27 8 : slabdata 1683 1683 0 +key_jar 11 20 192 20 1 : tunables 120 60 8 : slabdata 1 1 0 +buffer_head 221526 230214 104 37 1 : tunables 120 60 8 : slabdata 6222 6222 0 +vm_area_struct 12962 13034 200 19 1 : tunables 120 60 8 : slabdata 686 686 0 +mm_struct 145 145 1408 5 2 : tunables 24 12 8 : slabdata 29 29 0 +fs_cache 177 177 64 59 1 : tunables 120 60 8 : slabdata 3 3 0 +files_cache 162 165 704 11 2 : tunables 54 27 8 : slabdata 15 15 0 +signal_cache 208 208 1024 4 1 : tunables 54 27 8 : slabdata 52 52 0 +sighand_cache 201 201 2112 3 2 : tunables 24 12 8 : slabdata 67 67 0 +task_xstate 240 240 512 8 1 : tunables 54 27 8 : slabdata 30 30 0 +task_struct 306 306 2656 3 2 : tunables 24 12 8 : slabdata 102 102 0 +cred_jar 580 580 192 20 1 : tunables 120 60 8 : slabdata 29 29 0 +anon_vma_chain 7874 8162 48 77 1 : tunables 120 60 8 : slabdata 106 106 0 +anon_vma 5773 5888 40 92 1 : tunables 120 60 8 : slabdata 64 64 0 +pid 322 330 128 30 1 : tunables 120 60 8 : slabdata 11 11 0 +shared_policy_node 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +numa_policy 1 28 136 28 1 : tunables 120 60 8 : slabdata 1 1 0 +idr_layer_cache 428 434 544 7 1 : tunables 54 27 8 : slabdata 62 62 0 +size-4194304(DMA) 0 0 4194304 1 1024 : tunables 1 1 0 : slabdata 0 0 0 +size-4194304 0 0 4194304 1 1024 : tunables 1 1 0 : slabdata 0 0 0 +size-2097152(DMA) 0 0 2097152 1 512 : tunables 1 1 0 : slabdata 0 0 0 +size-2097152 0 0 2097152 1 512 : tunables 1 1 0 : slabdata 0 0 0 +size-1048576(DMA) 0 0 1048576 1 256 : tunables 1 1 0 : slabdata 0 0 0 +size-1048576 0 0 1048576 1 256 : tunables 1 1 0 : slabdata 0 0 0 +size-524288(DMA) 0 0 524288 1 128 : tunables 1 1 0 : slabdata 0 0 0 +size-524288 0 0 524288 1 128 : tunables 1 1 0 : slabdata 0 0 0 +size-262144(DMA) 0 0 262144 1 64 : tunables 1 1 0 : slabdata 0 0 0 +size-262144 0 0 262144 1 64 : tunables 1 1 0 : slabdata 0 0 0 +size-131072(DMA) 0 0 131072 1 32 : tunables 8 4 0 : slabdata 0 0 0 +size-131072 1 1 131072 1 32 : tunables 8 4 0 : slabdata 1 1 0 +size-65536(DMA) 0 0 65536 1 16 : tunables 8 4 0 : slabdata 0 0 0 +size-65536 2 2 65536 1 16 : tunables 8 4 0 : slabdata 2 2 0 +size-32768(DMA) 0 0 32768 1 8 : tunables 8 4 0 : slabdata 0 0 0 +size-32768 3 3 32768 1 8 : tunables 8 4 0 : slabdata 3 3 0 +size-16384(DMA) 0 0 16384 1 4 : tunables 8 4 0 : slabdata 0 0 0 +size-16384 12 12 16384 1 4 : tunables 8 4 0 : slabdata 12 12 0 +size-8192(DMA) 0 0 8192 1 2 : tunables 8 4 0 : slabdata 0 0 0 +size-8192 27 27 8192 1 2 : tunables 8 4 0 : slabdata 27 27 0 +size-4096(DMA) 0 0 4096 1 1 : tunables 24 12 8 : slabdata 0 0 0 +size-4096 425 425 4096 1 1 : tunables 24 12 8 : slabdata 425 425 0 +size-2048(DMA) 0 0 2048 2 1 : tunables 24 12 8 : slabdata 0 0 0 +size-2048 573 578 2048 2 1 : tunables 24 12 8 : slabdata 289 289 0 +size-1024(DMA) 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +size-1024 1340 1340 1024 4 1 : tunables 54 27 8 : slabdata 335 335 0 +size-512(DMA) 0 0 512 8 1 : tunables 54 27 8 : slabdata 0 0 0 +size-512 1123 1176 512 8 1 : tunables 54 27 8 : slabdata 147 147 0 +size-256(DMA) 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +size-256 930 930 256 15 1 : tunables 120 60 8 : slabdata 62 62 0 +size-192(DMA) 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +size-192 2119 2160 192 20 1 : tunables 120 60 8 : slabdata 108 108 0 +size-128(DMA) 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +size-64(DMA) 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +size-64 33093 40887 64 59 1 : tunables 120 60 8 : slabdata 693 693 0 +size-32(DMA) 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +size-128 3921 4800 128 30 1 : tunables 120 60 8 : slabdata 160 160 0 +size-32 332389 332976 32 112 1 : tunables 120 60 8 : slabdata 2973 2973 0 +kmem_cache 191 191 32896 1 16 : tunables 8 4 0 : slabdata 191 191 0 +Inter-| Receive | Transmit + face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed + lo:267102759 105357 0 0 0 0 0 0 267102759 105357 0 0 0 0 0 0 + eth0:1013761672 1354551 0 0 0 0 0 0 245537245 966850 0 0 0 0 0 0 + pan0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 diff --git a/test/aux-fixed/exim-ca/example.net/CA/pwdfile b/test/aux-fixed/exim-ca/example.net/CA/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/CA/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.net/CA/secmod.db b/test/aux-fixed/exim-ca/example.net/CA/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..c7f115bd68bc7da12b7a8cd053cac6ff48a39f80 GIT binary patch literal 16384 zcmeI&!Aiq07{Kw*O~wu~y?7G|c*srI0~C>Zk)jOd3)D6nWwjk`2YT=^yo%4{$)ikP zLo{tBIs^|M#*qI9A<38YOZq!UI=i8Wv_v)^MRx2^wnR2;S2yV{26nwkw41(Ja+~h5 z+ZUUwqux`ul}FdzXXWQ|AOZ*=fB*srAbzL2LcEnfB*srAbwSK5kxxu^V#=sUrd5(>^@@9k o|Ij}2>|OV5`w_qW-`hKZ00IagfB*srAbm$1DNwf{{R30 literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/expired1.example.net/ca_chain.pem b/test/aux-fixed/exim-ca/example.net/expired1.example.net/ca_chain.pem new file mode 100644 index 000000000..d0ee0619a --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/expired1.example.net/ca_chain.pem @@ -0,0 +1,47 @@ +Bag Attributes + friendlyName: Signing Cert +subject=/O=example.net/CN=clica Signing Cert +issuer=/O=example.net/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjAzMRQwEgYDVQQKEwtleGFtcGxlLm5ldDEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAN9lXg/7R2gY +392B325b/0eHLOrQG1px0aPuSwCBG0cKwCATtsKjYne15vNXAskVAdejY0Ujvo+a +d4jVi2qYJ8sCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm5ldC9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EAlm29nFrjiJPaldOtHxpmWzE3Zxit +Sl4RxdeJcJ7aGL2gDOAWmiVh6UPbMm/o6Vg2PxHp2YviOhVunp1C2t85ow== +-----END CERTIFICATE----- +Bag Attributes + friendlyName: Certificate Authority +subject=/O=example.net/CN=clica CA +issuer=/O=example.net/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBaTCCAROgAwIBAgIBATANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjApMRQwEgYDVQQKEwtleGFtcGxlLm5ldDERMA8GA1UEAxMIY2xp +Y2EgQ0EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAp2tm7DhEtMNQPz23MpsxYVje +SgMgmkDx8qdr97SBBVqtPcHMMrCEZ9dQiYCFxbshxXfeova+DbLZISDlHA9xjQID +AQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjANBgkq +hkiG9w0BAQUFAANBAG/rfiV0UE6Q//VIKN5CprvNXDGQFfcFCWNRCu6ZGTPpaDf2 +iPqVISD9trZrvtlUIgKjGgOQQbdNH9RBj5+6QKo= +-----END CERTIFICATE----- +Bag Attributes + friendlyName: expired1.example.net + localKeyID: 1E 0D 7E 35 C6 DD 12 8A 56 2B C8 44 4B 60 A9 95 DC 68 6F 37 +subject=/CN=expired1.example.net +issuer=/O=example.net/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZzANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwNFoXDTEyMTIwMTEyMzQwNFowHzEdMBsGA1UEAxMUZXhwaXJlZDEuZXhhbXBs +ZS5uZXQwXDANBgkqhkiG9w0BAQEFAANLADBIAkEA+LXqjv5NnRW2OlKWyYYH8ZFb +Fj4xAdg4qSa1WK/wlUUdpQldGzpDuq/BzuyQdJjp1vSnqhKjfxz0ef9xJievdwID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm5ldC9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5uZXQvMB8GA1UdEQQYMBaCFGV4cGlyZWQxLmV4YW1w +bGUubmV0MA0GCSqGSIb3DQEBBQUAA0EA0dUUjXeu21xQo+AsptLSwmzhn+EV8ixI +757XRkCnAN0mOZZHcv+imuiEXpf62J+wNyWKNCWu2iPttov/JAcYKA== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/expired1.example.net/cert8.db b/test/aux-fixed/exim-ca/example.net/expired1.example.net/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..85ea017135b0275d9ef3baee00c6cec33483b64e GIT binary patch literal 65536 zcmeI*e@xVM9LMp`_j?DP)X5MIPmwrM(2~jbfc(KY4n%|LY*<+g&5h`UOFR&+p>6%Z z8Tn%-tstWm<}Fz^(KW?Qr&F7MxPB}tLvf1cDlzj{CXJ@o_se0P1hZp~Kiczq`|kU_ z&wcOn`FtPuzCT}|uLw332q9!4^sPc3BLPVGShP~DP zs(q&YcKR>rd(zjYcc-0A>rV5sA%Fk^2q1s}0tg_000IagfB*srAbmdsb&#iiv=_X?qo{NI%g>VxJd z1#rFG|Ck2#dG?Yp3h|7y$mMhuS+vW9NKhYSA3*0iC3%4Ih*C!T%44LjJp708jcpRb zvAoP#?s&;M*{`sKm?A{cp!(G*G1h1$$~SIAf1MlD#RHymlvg-QT_QvrwKv$-*a~g) zZBe!>X^m+WY0atcr#7cPs1*k22LS{SKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{ z1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5J2GnD{wcn{h2VTdF>{3 zpVyn&miq*i0|@ZmH?uvMe6KQ4db`81DD7r%|lUv|uMd5)-x z$__bb32!;^^Jh|@2RFiA- zrWx%W(>?yVXCVcWt@fp)BZcTcz^z5K1Idl+0;mctWB$aTBG~dh_p9|2d*4vD++R{# zXa%34y<~$hDJx~YTJX)i1z*(XcN)}G`;>l)x?F*}dO=d}>IEtJ_nr5EW&Y>xi|^c? zyUEm&`gGmV>S5R3T@aaWl}=3iG=6v9j;pn^qCXk_LR4zj-W`X&xm4rc*!jbarfnlV zZ;ZXM!n-Vf!j4K`nO7ZDs`lSo==!UQMJwt!ZHakVVF+(=S&_{*{9t3 zz9i`O61CZ)AoISCH3EQ?0Cfb%H~rG zb3JDhwzjq&E;-k5&U8H?=gQ``Co`JF>G +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIEobdAguY51UCAggA +MBQGCCqGSIb3DQMHBAjyQJzMIkx+swSCAWBoW5JocLm3XvmW7cnK8Np23KqUs4ST +MG68rJY6pLqdGkn8aK0yZfecdpuHoFCZRdxQy9ztdofB50tkr7evlTuM1u40/9b0 +ygZ9ajxESZmF5mS8r6dFGXOBq7UrMpEvod1lujpP3hwtkqJOlPFhacPUestqDjP4 +zDmEmKQYyRx4DQ3QM4T2Wuc1S8TSECcMLsOgZhOxGULIzmtxceftS/V9NYewZsne +Q05TKH7ygWGvUyYEgDlFlBAk8CAiqIBBz3fU2bmWfR5p6hoSTqGeLlAL7fTid8Vf +g4HEfthygRC28+s5r/MbMBJKwTdRHnQbmK4rOxFUhYCkV8Df28Ukx/RaA9CKjbQl +2fnuTRAms72szZRoKsdS3xVgyaOdgdhVJKWP2QAUvzblX/wpKr9BwrbqIhXOqEiv +9/yCVqUg20sjNvYyw/2Zv9t+g9u3d5CMyU37e8AT8X3DExmpleiOdX4J +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..8831013ef26e3867bdb53b953c817f18110e7e60 GIT binary patch literal 725 zcmXqLV!Fu1$grS^>6Aee(=j$qZ8k<$R(1nMMwTX~?LeW;291{%niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw0r#RZv?NDjO&o$Rj+$#3IBZ&>*L0EFAiG zb;LaHlRE3URvYlLacZ@Bw0-Ag1bUZ&*^xm@`DZDMSkFzXrL(O}YG1@#{O{sWv=_X- z&@gTP?tYF^Hio~OB`;ptduv;wd0)x1@@YEW5=(gFdxGcka?bzfJbytGV~0T#V+#;B z0I}8rW+p}^CPrp7n+%L`1f;ZqBqSh(AOQ&q!_2&N1?SYF5(7DLUZjvTjuPiJwlIJN ztZ@`Mv11T}>@r4R7xFGtTEX znf26?q!&M&zBr9}{>S|AMV*HI%Rsvtg(0T&wwB&9KPBD(_;7d;rC2)OdTX{Mp^H``6J{rswUs wTfW$grS^X}dua(`GhKZ8k<$R(1nMMwTX~B|xDC295g{niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>BwEi99V-vsnY#R)Rncd;M624ZpS8TK+kWz~7%gaG>@a9zYysj1Al6#I%*4pV z#K??hlYudgP?I*0goK(9B-B6wmYJ8X;G9}iVjw5Zixh0eQR2MD76!0TG>#%CDhy(f zUB(Cu18)Wc4<<*3jrNaS-&?n58r6M!o4EUd#h2};*Eiby*9^UC#`*jvvz}U#^x}up z7pF1L|Ck@XsPmAf>6YZ$_zH2Oi-+xQ8vER3VrFDuT&!iFVZaCUkSsqV<9`+wW+wIq z12GU^6~yN;;9}!|Br9f4WOqQ~qUYmnaW&7B8gH+aKf612|2o>r^t?THYxoIEL|kp4&}Vt8O?cxbWM3Wz`eLCJP#a7O}qeddB|8O7yG>0KrJsHvj+t literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.ocsp.req b/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..c67ed9cc7782889e81902e4226e5bf97b3ff78c1 GIT binary patch literal 105 zcmV-v0G9tSXE0?jJ}^8mIxqH2QUEw1QG-gfF3S06IK1I LSe{GCEUyZy1)m~~ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..6b8b76373035f387cea2307be51287ba949038c7 GIT binary patch literal 728 zcmXqLV!Fb`$grS^>8wE$(@8c?Z8k<$R(1nMMwTX~T|l9228~x2niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw$tmj&7z{|#|)#lOmotF{lV+LkN2A1Rx8rN%bw7v2rtUm1# zp4D^m{_;aNqOJ;w~oj*Iw?;ug~ZEE2O!R^>K#K^?N$c$!_fiaG-ls1rrgryK9EJ4ATnU}8MoLW?3AScd? z6qv?Q;=INd2C%R-jv^<53}TR7#s~}pZw3PoCP#*i_K#iPTeoK#)qQ)Lxch;{m+hz5 zH`@Hy483Z``TQoco?4Rh;)l~0r!mj}m><5V^N^W@KPo ztYx5Kzz6h@EI%XTe-;*ICiVscF%VxB#OE>KV&i}$HfBy_cR=Ez=i_a0HP4h9Z?Ba< zyE}IOI@-$gygheo_z6qnyi8 zWQi3bm*mb|Gh-3UE%xgD-TIyLd;WONb3W%h&p*%SoG+3H0`ee<5Pr2-i`aERARn-R zc!A^!{684Phl~dCAftg?h`_%#_CtZ7f@t8qJ(z$z1cCk=@12$473$5*Y{iF# z%fi^9pWXE$Nqi;g>fgzPM!BlW&o;*!zf_+!;5TsGxhbWnXnfR@;{9Yp zLKj%k1~XsXg-j^yM}6fkU)$b|Ob4+j7gsML$%WYymo2v(ENkF?<{CP&XyI)u_RKMc zv6j0=LUpRqa`t~Rh-xnsQ&wnr z1#Xs-i?a#w*Uh!ElStM02c61y!zgTH!Ffy8)+~av5@{MirFg`Iiyo;?M46eP74=LF z-9)-0)jECa;Oz(ys|PEc=Yr2}X>!D2x22VK-1St-P19$@h_a+a37C`fF;s)^BqrQ8yCcuBM2P2jKyC|+D z!7C;!7^y=a6G?DXe{X8#T9z^D6`%+ByM8qUQm`is2nhI<0slt`$WI~CNS3`JDf+Hr z)iu0-(7qe}6rx~HI0)|I$BBEl&OoE>cbnOROM@Ea(RJhg*5LA1*oj!vTbLa+Jw2iu zw8&y^>7-Am(3C#p?wU8maRiRu9m%z#+WFCTar+GrDpVE3O5~M}p@kGBhi~OsM-JTm zo~d>0U{!Ho5ztfj8I~{Eu)FdEje!wWH7y~B>IA7RxN%=?iP50i#o&eaRP$Mh#TOsC z8jmCh78W5&@0OdnefmHr+~L@=EUi1VyR<_bTHh`LnOuR;`%*GnuLBw-oaHVZ|qK{7j0Ri;6vc&bwRZ+iwJ(gkPq3(B}T%*F#o6- zP$&F}hcRbDRVU!;+YLsQnji+}%cY4m9eL4MoZ6f8?L_HCDYW@85VJt>dVClfVDcAcBnRt>H>(2mr#Tw$-mUD9EsO>H9C zdx`Hn__#oL+9QHQkGNwAdRcB492m7OIQPm7H}5Ww8`lA^d}6|RnwsoYPL^uS8HVv! z#ngZEHot{SVkWJ99C!47o?IM8LPhL28|J^anLy-lvfxa$9tJAAiyQV>lGb))Rd9IP zl3Z5DAPOWmawZMm{Ar>R+4SwZUw8=CQjzhB*!{6oe|Vn30Evjq`s=v+4O|`8+hmXRXaRb2lQ}xCmIb~+ZXSd7HbfWp=wxlzMH~<&w%%b2p!d?VIyA{U!^H) z^pUPTtPY58#-daXlo@0}q-Pa;w@|2=@!Y$aoAN4Ni~F{q=d>=%2T!p5WoD&n3d?`f z1=Tc!p}BsHSkCUfR0x&i*4W1AN^b(^U?RMGyy|Ym^~bcA-yXG4EgNNXAKZi&MKXNG zju+GEQ4F97p5z5viF273$_rYFI$7xg!A~m^5<-Q79uw~9w0EAoGEIqoUAlN5IY#mp zl22e7L8kAaKlGo%QSGcm+SdnD!oSv|o%Y$>5+d+V7^WXQO(%rP-M;EQc}jf+q~0Mls5{Aba9(dm zUV?LW0Lnl1W`kJYhJ_kv-L9Wl%k*MC9v5u8>7UmCk0jV;e=ZHpvUle3cX)&;d8j5H z$j-g2^|D3Riy9BHKh7s}OO+dpshVqPMFe!9N5>9Edy+Ti^9xElXKyg_FP(KVj%lY1 z<+k*0i+0bwq}HD6y1bo8P|B#RY)hlS;l+l>sc~=DulJvqVtf->EO}9hE9($HQHHPn z;x?|?mb^JP&yjK(_mO7HMHdbirphK7R7^ zdp}ML?9BDxi=yr9PAa+$-va5)PJZ2N zef9EFTV0vECN0WT=oVQ__{qXkHs$)ch**=~vQtH8dMZZ7w$tA!)ll*@E-0AORV9%k zO6NW0@uhk&6O()i&;C9E)y+RaDf}xZl?!gng=C>~1xEU0T-r$Qc=eYSH(1r}>)py* zntlB&vFYfNb1F8ZfPw^>CU)cFPRDFdxT<$11D*2JC^6qEeGHc5oa44J{XK`Z4j@t4 z_j3;G*uV3Y;AZr54rQc`>enidEWH_izEVPQU0Xijf*6=L>^ zzA!oIV*|7#9BVdkPW5wYAB;}PM+Z|x2iSZ;ZhDJ6Qqtqit5OB$FfPy)-S6-uNsZIX z7L`BNvsj}Ptco|u0$`F2=+K6wdWtm%nDlJc>(1m74Z=?@VDx2u#aSHe-1({JVHMfp zugHMQgN!-#+A@RbK%_gil<%f1cE>S4f_nTJ75mJ`YX^jXh8Y0x7kijzZU6uP literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.pem b/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.pem new file mode 100644 index 000000000..310db9b2a --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: expired1.example.net + localKeyID: 1E 0D 7E 35 C6 DD 12 8A 56 2B C8 44 4B 60 A9 95 DC 68 6F 37 +subject=/CN=expired1.example.net +issuer=/O=example.net/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZzANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwNFoXDTEyMTIwMTEyMzQwNFowHzEdMBsGA1UEAxMUZXhwaXJlZDEuZXhhbXBs +ZS5uZXQwXDANBgkqhkiG9w0BAQEFAANLADBIAkEA+LXqjv5NnRW2OlKWyYYH8ZFb +Fj4xAdg4qSa1WK/wlUUdpQldGzpDuq/BzuyQdJjp1vSnqhKjfxz0ef9xJievdwID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm5ldC9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5uZXQvMB8GA1UdEQQYMBaCFGV4cGlyZWQxLmV4YW1w +bGUubmV0MA0GCSqGSIb3DQEBBQUAA0EA0dUUjXeu21xQo+AsptLSwmzhn+EV8ixI +757XRkCnAN0mOZZHcv+imuiEXpf62J+wNyWKNCWu2iPttov/JAcYKA== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.unlocked.key b/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.unlocked.key new file mode 100644 index 000000000..77c8dad1a --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/expired1.example.net/expired1.example.net.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBOgIBAAJBAPi16o7+TZ0VtjpSlsmGB/GRWxY+MQHYOKkmtViv8JVFHaUJXRs6 +Q7qvwc7skHSY6db0p6oSo38c9Hn/cSYnr3cCAwEAAQJBAK1O9tgV1Te1PXp+upxL +TZXD2FkzlSrX5QPZ+VyHnXolg8XNhx2pA1J4iJrnvooWQRZuWRhi/p8g2ygJ8B6I +60ECIQD/cO5OrdRWg3EBgoCWN7WAZ53qMmSRxAnMt95W5yujGQIhAPlBNzbQr2Z7 +DVvwCc2ERxuaFGTcLZH/x+oRhZ9jr0kPAiB/79froDSRgBPBZdNxaUWGol79RXAJ +cd5WomDBtdatQQIgAVyP1qbRLnghnIz1IMBGOypeTia9wPxqtSafWj2LKZUCID/d +8buaLYm3yYYAQwbTBtb89+gpRg0I51DFS6fNIuU4 +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/expired1.example.net/key3.db b/test/aux-fixed/exim-ca/example.net/expired1.example.net/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..9919dfab31e695d19238a348b358934cf1da5529 GIT binary patch literal 16384 zcmeI$Ye>^k6aeu1_rG-7f6YvVY(*zJ~d^(SQij6W`EZKnO2= z^!I!*%m|;D=2zKu<~tRc^yG8D*MmWPkJH}k>OF6>w;aeyIGboF>#~WTCZ5#Syt&tMx7)_Ao#s)Zbzs)##FcpGYa^Y%}5dZoo=7<*5M++v&y_w|(;1loI&brXZv zLKxyvmvNCNbEX|*zin)~e>Kr43=wEptJX6vz9px32Om9np11V_Bl47Ml7gc&Ue7Fw zbZ!nJ9;~4l3YQH>RxjxySpMpZ<*F})AWj-^`B7;Lj`L2gFYX_4QB-R(AEuxSxgCua zF?M|;O-!#lwNvWaq1;UCliKkNB;X$WX zzHbaoOFb*Be2=?MHVkWjgcdvK{KK!bXIqV3IOG`Ui}m_dxi#?XM)QJKmRm=x@ZZr~ z*V6InysE&|{q07zU12v$Ea(jaAOHd& X00JNY0w4eaAOHd&00JPeAOb%D#>GziWcNwrzzts6vz_0>{c zbeG&dyIk4Inld)t+Vy)jelHgyfB*srAbdtszV=iU2jiKq=9vx(Q=RIqCjGT@>Vm=d)9RFU=Y4Lu zN+%{cGqW(aSz*(pT&e%Vzi*!U?)Aqmezf1d`0bsB00IagfB*srAbm$ E14$)J8UO$Q literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/expired2.example.net/ca_chain.pem b/test/aux-fixed/exim-ca/example.net/expired2.example.net/ca_chain.pem new file mode 100644 index 000000000..323ae1688 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/expired2.example.net/ca_chain.pem @@ -0,0 +1,47 @@ +Bag Attributes + friendlyName: Signing Cert +subject=/O=example.net/CN=clica Signing Cert +issuer=/O=example.net/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjAzMRQwEgYDVQQKEwtleGFtcGxlLm5ldDEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAN9lXg/7R2gY +392B325b/0eHLOrQG1px0aPuSwCBG0cKwCATtsKjYne15vNXAskVAdejY0Ujvo+a +d4jVi2qYJ8sCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm5ldC9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EAlm29nFrjiJPaldOtHxpmWzE3Zxit +Sl4RxdeJcJ7aGL2gDOAWmiVh6UPbMm/o6Vg2PxHp2YviOhVunp1C2t85ow== +-----END CERTIFICATE----- +Bag Attributes + friendlyName: Certificate Authority +subject=/O=example.net/CN=clica CA +issuer=/O=example.net/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBaTCCAROgAwIBAgIBATANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjApMRQwEgYDVQQKEwtleGFtcGxlLm5ldDERMA8GA1UEAxMIY2xp +Y2EgQ0EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAp2tm7DhEtMNQPz23MpsxYVje +SgMgmkDx8qdr97SBBVqtPcHMMrCEZ9dQiYCFxbshxXfeova+DbLZISDlHA9xjQID +AQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjANBgkq +hkiG9w0BAQUFAANBAG/rfiV0UE6Q//VIKN5CprvNXDGQFfcFCWNRCu6ZGTPpaDf2 +iPqVISD9trZrvtlUIgKjGgOQQbdNH9RBj5+6QKo= +-----END CERTIFICATE----- +Bag Attributes + friendlyName: expired2.example.net + localKeyID: 1A 68 61 A3 03 A4 DC 65 19 7A 7E 5E 65 37 39 DB E3 CB 56 AC +subject=/CN=expired2.example.net +issuer=/O=example.net/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBTCCAa+gAwIBAgICAMswDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5uZXQxGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDVaFw0xMjEyMDExMjM0MDVaMB8xHTAbBgNVBAMTFGV4cGlyZWQyLmV4YW1w +bGUubmV0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAMRPNIrjXhmHfWrc/c+K9esj +3cXECi38lpKgZyhqN8CjRvifIaMoZaCPoXoppyC3MmtLhT5JnYe8+1vSApl9jPUC +AwEAAaOBwDCBvTAOBgNVHQ8BAf8EBAMCBPAwIAYDVR0lAQH/BBYwFAYIKwYBBQUH +AwEGCCsGAQUFBwMCMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwuZXhhbXBs +ZS5uZXQvbGF0ZXN0LmNybDA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0 +dHA6Ly9vc2NwL2V4YW1wbGUubmV0LzAfBgNVHREEGDAWghRleHBpcmVkMi5leGFt +cGxlLm5ldDANBgkqhkiG9w0BAQUFAANBAMmrnrUFZRECJcDk4BGSMQp5vvC/uHi0 +1NSP3Ki4Yu+CbXUHtgZqwOB5abU8INeLbJoab2stMFsdevzRYuuqb7s= +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/expired2.example.net/cert8.db b/test/aux-fixed/exim-ca/example.net/expired2.example.net/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..6df2cda5079b933dc93d3c630fca9bf0e4202272 GIT binary patch literal 65536 zcmeI*e@xVM9LMp`_j|{AULiw%h!S#WB<2r3cW4mfJkUzhRXY3Oz}b*aIDXtAp7Teu z1xqxo;cPmkRO+^9I;%BBmq}Ez>8zDzW0Hc)YLU(C2hvhU-!F%G5YAxEWqW?vci-=Q z?#q2XpT~XPf4)8^Oi{T)2vrEeoZCOX@v9G;Tq80koJbaEho00IagfB*srAb+}asYV^9@URTLR&8hmf%jLMEsMF|NJa;z;<4mBB`Fj^w+a4pX*DJ^zQ^tgPs za2ckz8Y0Yj#qPXZ>$EI6a#*O%ZnH_7&7LwzreqHbO-Ym2UiRms<_8Z$2@!@_Le5aL zL~YTcpVA)K^T}+dW1sz1TkgD;nFech<}bh27Io|?56Rx`_~=vnyD#K7&3^Iu)r|)d z8ke=aaj`!1y^{&n@9qj){IY6LgyO$P-rY5)xClk*G@7MJyXaFNqRl8SOm8!48m8be zXcUGl;XU_UqHp%28#>!(B(+R^^T22GZ5yIGLI&r}v7FyJJf*E5_2Sw;HzioF)YTQ$ zpL~3j>K|d)khSlT_!C)GJKoRSIn7n(b1%}kd@gI&QeT0$%eu zUhTV2vq1<&gbFd&o$qmb@~!$~LW~ze?Z<~3WXg4xN30wkSRO+I%OkiOeF_OO-WDfg z1J6XdmY2HAT+i4i2CXo)uSQ|kHV=5xRkp1fV)JLBmLdqzq6 z-1L(4o3+CLpMwAb2q1s}0tg_000IagfB*srAb3oh|46BPy*&#Cyi6g|zE!@kTAJEXUL& z){L%9DDe48)030)%8G-NzRAT}9(svyqSo9CQj1(~E;;yG_SvmS?T@+w+;PR6?#H?@_@3{YLEE_rVu4WpIK^=s#V+30d-@zVSHP! zmrVUn9W0_`g&LyO%R7O3QMFEc?J_W+Ro-*Ifyvr_1KRcj_U`QmCTHJph}SKXLyt{b zcXq+>HLD6wUHN=n`?=Al8xL6~T;9B~CO@e#wZZ?;A3GBKNv@iz*H@0MweGVQ&00O> z;caU^xRi5T-MZ?f_CT4GH^}mXJqyKnL0a{qNYwWjh?bEi^Ei{X%fcXo^7oxOpt6~C z_5T&cm?X9R4X(bHN@YxU)p?iXl_m!T?2~1@K9+D}jEt`6GlJjiThglW$gb^sLtNo% zV#Bv*!Z+G1E9x(NxPSSc6DO)py|sVg&lM$02i2Jh8_uk7@6E6_tuL+~;VqgVbK+KB zKDO}OPVa#}*P$}NMR?`5*lmMBB7gt_2q1s}0tg_000IagfB*srAb +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIU+oGNqBSHjcCAggA +MBQGCCqGSIb3DQMHBAjYaI7Iob+lDASCAWDAZIbvl/AbphvMZhynrCFGzj6iN309 +N+U1mQPGWD6hisPfA4aTpIQyHtVah6KCE1fbzGFgiNULsfByVj4XBRbetiVKMuWA +xs/EEcPhNRG0KOeRxzDtSpM0lG078XAC4p7wgqvhf4R9524Vq4PpYzt+tKfh0rPC +leF7VFJ5vi7Tms7q1wqtL76Wgibq4m43XoFrYMbQL2qbXl98rRAP6R6u852f4L/D +Cy1EGsgWIdGjCPQRxdwC0Vf1vIjaspXBmVhbFJR9Djp48DShbAO11cXRSIligH6t +7p+aesQM/illunmCaMzMYFAjdrMYZEO1bqVdU5Nd7/tlQQLgHSdo+iD6XLnci7dw +elQ9bRxYVMEDX16kTXd4NU6xP0Zpac5XHu4ji2PKlSOSxQh5GbPICXdEH7K/Oshv +CUIZbYnlGsOT2uFgnChtUeIwc6OXcSv3LLXIwzg0ec7yN83j0r3jQRQx +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..7f6c27bf702cc2956ea33f59c129c9dd23393bf0 GIT binary patch literal 726 zcmXqLV!Fh|$grS^>9j!;({VOVZ8k<$R(1nMMwTX~9YCQi291{&niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw}L5go#CnMIbeaKUXp4 zYr(PppXa8n{96+-*K$rZoAU97_uEU8x4U}y z%=EN6^6!1%4l_Z+eYe7T?_O-Ou#gb_#2~wj5f}#E3^AG^M{ZqGET`}Q_*_XCSB+fT1=wE3?Ydew~c z`Aud$wIu1q52r6qW1jypKYUT=Ax+aQ$+htn;zkz_+ubzwxy!`N$iTQ*%Rs|`59lFT zen!UsEG*1S>_>Bw-46F?}*;uvtn3<$l8CXOn)EGaF+#l7m&HQYe#{tXAi8(XBvWR?;KF7`a z@_y*|`^y64eja}={E2dd5tX$V8Lh{MNV88 z#2~wj5f}#E3^AG^M{ZqGET`}Q_*_XCSB+fT1=wE3?Ydew~c`Aud$wIu1q z52r6qW1jypKYUT=Ax+aQ$+htn;zkz_+ubzwxy!`N$iTQ*%Rs|`59lFTen!UsEG*1S z> literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.ocsp.req b/test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..4684f07566b41fabc26c206fdfdcba74e66caf3e GIT binary patch literal 106 zcmV-w0G0nRXfS3lKQKKoJ1_|b1uG5%0vZJX1Qd{bGv!&oT8y?g&4x(8IeC$6ne_w| z@Egtx1?k^a_ur;a9{I=T7v*?z0s;Wbq9ZUNFdqg9D+U1t1qUzz0t6BS5M^QyZ6RFs MaK?}M&X%kEpghPWYybcN literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..a9ad37057ca596f84eadd70f191f6225f09af538 GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXOn)EGaF+#l7m&HQYe#{tXAi8(XBvWR?;KF7`a z@_y*|`^y64eja}={E2dd5tX$V8Lh{MNV88 z#2~wj5f}#E3^AG^M{ZqGET`}Q_*_XCSB+fT1=wE3?Ydew~c`Aud$wIu1q z52r6qW1jypKYUT=Ax+aQ$+htn;zkz_+ubzwxy!`N$iTQ*%Rs|`59lFTen!UsEG*1S z> literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.p12 b/test/aux-fixed/exim-ca/example.net/expired2.example.net/expired2.example.net.p12 new file mode 100644 index 0000000000000000000000000000000000000000..8f9ef945b7b56dc8f7c2120159a74518a11d48ef GIT binary patch literal 2388 zcmZvdc{CJ?7sqD?gCQhoc(#ejGSQ6e$`WCEmMjh7SqhOb(paWwERChHzp}oLP?kX| zTN1sLH<2+KjBRAeGM0p4rY!T*`)&Qs`Q1P6x#x4vz5m?LIbS3J1mr^!z``0t8zScb zP!L!`P$BRq2yu{v|ARq-$OI4{G6Bc~i~MUt6aoa5Bmgt^VH#2e4EZPB{bmlHnN+*yTh{KrR#Xq^ z)@&}+u&IejgzKv}m>WoPs(2J^TMRTGaT?_R#Up5C+uCh9ze?3lO^BZy=Tb zyLcES%`YVz=v&5DKJG7rkMr`^HyoSk!PEf$uAdD7m+T7z0s?+!!2b~f{6h#G)231k z#t$oh;^f)vkqwIa4duv z(TRhE*@%jyKBu|CE(K!OBMIv1evrB)Qm-M_Urp$rJjB$=uzj zWZ7zWJeCFn6mtiR<^js{jeJzi8=1r7rP>ke1}pmjCCqQlk7iTg4&C*xAoFOVzN ztA%9%<`Kq=m4zy%qL|f?7K-~sc<+OW_k0;Xi(P~lil=|=2+bJmV-`p4if<4sb;Dw8 zZ@pYQZFND6i#>L8B@uRT`&;)sxBh%^@liORCX3em^s{<+lS7v(oVQo=<^9e9)r4G@ z)f+WQ@v(}j-(Ne)Fv>d}ViU=DpHj+^ol!o?<*Gm1K}wId+DGb34UO`zLtqys5n?z~ zX3nBe-~AbqkMU8ncviNkGtJQ3$M2H^YU4(&#wJkm|dx zxnLu88Clt1kAGErwVdN*Koa@p4z8355RXf*pQ%m)4!6i-pD)}O^c3rv(*d7ekeF90 zUTWT`vt1s(O4OCitd`r8CAr@)=8nHP$$kO7xRSdlungNy(%W2|EGJFr%cjnU=dvw> zxJ>JSZy0maGCbCznXM?*MS1neW)!lQKr+@})G-A;RZx~W+q z0CoLV7g@aE5{^mndrP$&%r)_j_->g*ei4($Ig)7@?#%&j9|Di7^O<=!j2m84NOhw> zsJ5yPJ}llGc8pCLxwzEnQj+0ocV{N9C_Fr|7*{l6j0vCJy^L-rtz6s;>M}wi(#I)Y zdzSW39S^G|R+Y`CKr%PlCx+-`kRmAr|9mx%!pWX)fYg_~t8UoKqY5T>pjtfy$hI7a z&wvq&O0z2ja)qF!(yO}O!?UN3Xdr|iqAVqxKDw*6UX0DEK<15xF4A;R!v6S=e1?ck z2d?HNu7iObxn(fA94h&sKed@b2U^1O8W&)($i$Ov1XTMS zGpcQsrBj$VQm@)Vh#Vj2=i85vx@?n$u``Rl_r~(cDB09`W=2w{ezd2KSgcHQh-lT> zm@cD;qX8AS$4mTN;%NytWoEv-Ghe-_DF=CJSLF!IpOJg7S#Q1)XUvH8k~kF@&^f7A z&Uipyj@q6KeTXV&j`=)u@I$1)((t~r3ndTX9%;a3;Q3F}U!zlYaKcwJWfl!y(HH%u z=_3Vm@|F48q+RHu7Iu}5MR%E1y&leaA#oIRS@@K6{`M6s2Q}wpUGgBjuSqTM<0xRH znNol^QLrs#NDdphB(|Or$;v#Mmd-8a)xJe-2y*sR;{1k4(@PMtN`5I}vpt6neUml7x+0-ahiw$?8Xj`lf%e(gPPl|! zk!}7f`>uy=)j=Y3OY_`%9C$<8UB1M;5Nz;gSj~x`UR`K+5^>_%OV?gNeB((A>D-N) zcGGa*x{aVG?jf%lK90OT`=)?*oTn;#v-g)w#z9{G11V}fH|rnICDPz+1l6{tLSv35BEU zCxm&Fg36$s9jflesGNNG=BueCSfni9jFa1AloClv^YUl?(BM>I17{1^G4tA{I_c10 zE&G&Nft9WdF=?7VeEE``NExMJ?fCuH840@{dq{_(Uu_=>7*}ohaJ#A5naH~fVcJ@ zyq2M{-e|G*Fs+H1x$P^Uvxdd?&g3QS{Q4bs@5xx<6*Oo(TC&H1H5)tKxyv}=`7%10 zkP>{?aK(%G=&uuJ=YP3wRn9$*y4$lBpascdq+*_J;NS<8r!~5^9BlNR8~0d|sg0GP zAL8PS6J2FjzP=Cf@_7@zn;8Xpc2_m+UY@h5%%|rc6cg`Zd7vl}bo@X^4a&g~0*{F+Py20DxbrySpQqqit6+@dt(3zwY5Q^k6aeu1cbkc|&CHF=2Bv0C+e0%fBYT*lIA0l>mDZa7(zd3#L@`Y;A7kb- zb4i7dfnu6vqN5fu%%LoDsfk({myoOv${E)!)K&zPv$L&dW!LXs&OHv-PHI4)Y!JTJf;@GtY|mg@zyi z0w4eaAOHd&00JNY0w4eaAh1>htk5ELf%=u&No}UesWH_1WI6dh`4++^N=*i9%8jb?4i9m`5^aDrHA9QLXp&m znND}mwYe@ZvRYlU4?CsZagUiV0&CAGsa(sz#to6FqPR~x?O^@#FDM}<@@*=e{XsWK&uU+Z1scfBRtSpQ- z%xFpzd>HY~xpFc7{k`GIBTU+>>Oqgn-iWa0o82F^#l}?{6nKa2Mj_5Em^0Kyku|nA zft{y$F|BX`4XvvcLj+}B)u(X!NABPJ%oC7E)f*)E>Fh<@6Gzaee z94XD)$C#xsc(2P#o5ivnJ_l}D=NUsI1&!meTV|y%ZZGcZtUmaZq#MnN;<)TbeusI{ z%ny{u%&`imF0T$sC~{bA@!#6aI+CBJ>lF#?>*sP+8y{2=uDo(B+qSEmteWl$bj;IE zOT3ko1=l)%<=ND{?r?9JKHk1C`@*{=o$ULh^O&aFn)RcqqV~Mo1s}B{aG_?K!VRx2 zt;=LKIx4+{A^Cp6cMG2yPYzgAXJ7w5TjlsQ;a!shXJ{fZ?)I@J!3=%wyeRoBU&NB| zMVAS7nCCk8%?6oH>~E-eUU!=-(G0=;5pGZXqU>c_Z$V!M;l=e2FAIIW>VL zNW=v~LNuN#NlF&4m46DD69hm21V8`;KmY_l00ck)1V8`;K;ZucmR9pW3wnb92!H?x WfB*=900@8p2!H?xfB*=rh`?{|b(N3+ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/expired2.example.net/pwdfile b/test/aux-fixed/exim-ca/example.net/expired2.example.net/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/expired2.example.net/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.net/expired2.example.net/secmod.db b/test/aux-fixed/exim-ca/example.net/expired2.example.net/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..372213dd508984fb99cd7bb816404f15d13d0015 GIT binary patch literal 16384 zcmeI&ze>YE9Ki9Pt&|Q@UED+t9I_Sa9vtc-MJd!5h`DPCO_PwOPzN8w-AC{#oQtoZ zPv9>0lB;MD#Hked9{jkw-~H}SK69jT7>GzsWcOL*zz$_kWXE=8NOLu?>s6v&_0^Iq zx=-$2Y_4o&O&J?+P4}LS-^+yvAb8WDNLROvFi7_19j5rsLNE(Vq>cw!!#L2BOT?wXXaUy8-3a~^I($2rk$9=Q=!R= zer|@*-1j^+Hn(4ssR<{k_C43P^^K>7aWIE({D=CPZ(o0G<461Li{C$J2q1s}0tg_000IagfB*srAn@M> EmRbQ!8vpI5)?D^Oww%%PaF{?iJ7WIR`?)=Po_p?l z&-eR%eLv5ipU)#q)&e1fDunSfA=0%|F@a9lL%Kq5Ano@A3=U zQQ!17`hLeZb6`Aoyk9y*009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~ z0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0-AumpyQ4%ct4M%VhZ z)3 zhS*(N_*2U41IM#nX@?xI+6!`9=NN2T)35xpyR_p#O-TOUv=2UZ?0debIs2t&UuZfU z*HqoQ^Xd`H{9Oq#QU=!Uf211*7(+$uOI$op?#gTBV>p>C-m}`=%n`IsaIG1u`$ke{oujU zBWEAIS8W(=SeJ3=q1Z1n)^2|<{f${3pTDF~UWKF!+8$`xS|;*pXfZ;7|arZ*E}qV|^ZAZ~7uNw)}(7#ST1j}d|J=-G`vg*X{& zA0uM|ZASV$PgRt9me?oth%mLki$agxbp4~6g;lOpjaux!)g8NqeHLs$gXe40+Qs&ynm_cdUOdJ~?H<;>yw;job3-a!MQXZGR@1s``x- zrEoy&Z`O(jJm&FLl~j0zS+u%pUCUfETq9h^XKb2r+IiS{+BsO&1-K6a2q1s}0tg_0 z00IagfB*srAbo>%+iWd~6Ppij>HKPx{Bq)Nao^XS_= zi^8sD7Du&xUDM`W(3$z-#7n1Q@|T`&xI9ozv(7mxF1F`RafP>^UHxsU)myi1 zW=q?&hMv_Egc3}JhCrQ%NFn+!1ECju2&VdkA&98Z%REdTP!7J@YrcUgScT{}&0kCr zVqls6hTE2MxIP%wR=5WO2q1s}0tg_000IagfB*srAb^k6aeu1-)0VNE_Ji!GGb+kqArwH4GbTY*#o6C7pSf6uhyoUo3$0%W8}~e z6CJMEOR=yLow|`d@DHUGnS}GPY7CPxdm6+t)7jfuANt$}BRB^x=Wy?ZbNF#TU9^ZP zL!3m00ck)1V8`;KmY_l00cnbe-WUfS-OWlLBBz7r5ovc=_Z24Z@j2JSrbmeFp37-pE>UAN!s$N&!ev-b|toJJD!HA^W5kB zXtnxo{_qK6I4CH@P_7=zBCun;+bu2ezF`zUl<@Ua{7fOQ^77D*ut5q(w=aciuW%V( zS(=Gbo6WOAJ1Ghr4Yk+<#;;h~rDl#T?&VI4Tp!R-kvnT{a@C;{Jo{ROo}sC~NEk?0 zXR*X|R{b`kBkxSo3!=y0nyXvdctpkzwp?)O+I-g6^ls{AjYPFtIZFzvCW7wt^2LtR z{P*t2RNa&~{k{E0SWefywCzb(trE+$v7Plb+UITeh?2wJUQ(VhaQK7ZP}PP#d%jx( zpRh-!k#bdN!b2I6e4G>)73&+m|K?=!?v&R7a{rYd`)V9@qmMQV5=1LJA-34(V^%je zxQ$VLRJQ!OYwX=t$wZP{J!ZM&3ean+1-vd{TYTxkjrrHhB-&46_wCACW_(>Eso$6r z-*Kv6pIv0aJBrw>G)c26JyfunDXU$Zhcg?0STYoyd$pqmy}-AB`JV;7K>!3m00ck)1V8`; QKmY_l00ck)1QtZ#Co`Lt)c^nh literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/revoked1.example.net/pwdfile b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.chain.pem b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.chain.pem new file mode 100644 index 000000000..6db70169c --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.chain.pem @@ -0,0 +1,29 @@ +Bag Attributes + friendlyName: revoked1.example.net + localKeyID: 3A 08 2E BA 85 F0 DD 7E C5 FE 51 92 BD 0B C7 35 9D 56 6B A5 +subject=/CN=revoked1.example.net +issuer=/O=example.net/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZjANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwNFoXDTM4MDEwMTEyMzQwNFowHzEdMBsGA1UEAxMUcmV2b2tlZDEuZXhhbXBs +ZS5uZXQwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAr20bGUprpXdQGlk/FW+RJ19l +FZ//slFysFeG3PEVjVjCnvsoxBFZJFVyfHhyxTvVYdoC6BVZfs9HRAjgZuBImQID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm5ldC9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5uZXQvMB8GA1UdEQQYMBaCFHJldm9rZWQxLmV4YW1w +bGUubmV0MA0GCSqGSIb3DQEBBQUAA0EACw87yNDj6DBkvF+i1qUyw6vqijmPyOQZ +4S+UOCyyNSsJrA1VMjRjAqGTgyU0OFtfcGuhvZ1ZnlFrvVog/icGcw== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjAzMRQwEgYDVQQKEwtleGFtcGxlLm5ldDEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAN9lXg/7R2gY +392B325b/0eHLOrQG1px0aPuSwCBG0cKwCATtsKjYne15vNXAskVAdejY0Ujvo+a +d4jVi2qYJ8sCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm5ldC9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EAlm29nFrjiJPaldOtHxpmWzE3Zxit +Sl4RxdeJcJ7aGL2gDOAWmiVh6UPbMm/o6Vg2PxHp2YviOhVunp1C2t85ow== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.key b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.key new file mode 100644 index 000000000..d67c105c2 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.key @@ -0,0 +1,15 @@ +Bag Attributes + friendlyName: revoked1.example.net + localKeyID: 3A 08 2E BA 85 F0 DD 7E C5 FE 51 92 BD 0B C7 35 9D 56 6B A5 +Key Attributes: +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQITLxrgeizo7ACAggA +MBQGCCqGSIb3DQMHBAiR0pknm91lSASCAWAoe8AKx1R5elFbE1FAZaGyPjegmgc5 +qFLKuVzK43OMKRphZJPKRSa12rzz40qRozJItXiDNL1+qt+IbOirtUlvvKu+5cdC +oHQgSjA58Is1DN6f+OqD7v7S1ZdXrtyMmtvaHLfjsgX7f9acq8Q7OrcdVcJksVRL +7yCULtR0NRxG+elh5lF9SNY+1f8Hee/dfP3LmyE+leO5ECfOWcIFLBCjLbdmMQFf +lIodgPiy1qjuGwuXZQy/3s1tZ4p2R6dQ7FrPWCyDAxkd/Vw5+BWZ/UJD8GDKtvLL +E9lyYuUg7KUaWiSSdsHmXMyrs+xdW+1GHqAVkuJqjWR2nxtXBDQ7GIaDfZr7nosR +OR5ABpVtZ0eAiJz7qX3WjxtoQJ/7RRPYOnINzyRVgHHHVekyFdYd1OiQDgVoh+08 +HOOA6ZbXLyOCGqh5Syp0RAn7d8qSfX/Z8l6wnxblNG16noDPRbNGf9rU +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..3c7ac6963653b0f5afa279c8e922a0d19b9b196f GIT binary patch literal 725 zcmXqLV!Fu1$grS^>6Aee(=j$qZ8k<$R(1nMMwTX~?LeW;291{%niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw0r#RZv?NDjO&o$Rj+$#3IBZ&~W(6s`(ER zr@15=hU-0Ct!u!`#;Mij(e|B}5$Ih8W=DoJmyf*abJqLrTPc}z#*#ZVH+4=t%i-?% zog7a8*k0KSvN|@W1g!ob(v_3#%etx5DE3YVi_XL~Ud9{#a2K4e*uS8OvBRK=u?2`5 zfLLn*GZP~d6C*R4O$Np|0#e#Q5)zO?kbne*VP;;sf^%w7iGiFrFH%SvM~U+qTNuCs z);Nls*fEGfb{Qiu47?c(JeV9AHrhXSeQ({KX;k;^ZQ||+7GJiXUf*c*Uo-To8Rzqx z%zA1`(u*HXU!2A~|6_jmqRvB_rdyJ0<156CE*`eKY3y^CiJ6gsaj}+xh5;YYL$dsg zjQ?3!n3>oc48%ZuRS=)YfQyX-lG2ztk=+4_i=L0S#nn7hYP`Kx{_O79{p)Be)ARP+ wt>Gsujq^_VRj^&DdTuvet-9f);KFbBl~qp|n=EJyTEzO=>lynWE77wm0QQL5y#N3J literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.ocsp.good.resp b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.ocsp.good.resp new file mode 100644 index 0000000000000000000000000000000000000000..71c6b2daf6ebe46fc4f6e83bc8142d6aaade13a7 GIT binary patch literal 706 zcmXqLV%o>W$grS^X}dua(`GhKZ8k<$R(1nMMwTX~B|xDC295g{niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bwl*N~acZ@Bw0-Ag1p1AE*^$Aa{>6*>CAWM(dY|$C*I}d@`DN|SCAGLZy{MQVXcKH2QUEw1QG-gfW!2vpWtDZ LL}4*kF5#;!A^0Rt literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..8549f0ecff2cb34c1e2f4bd4df6bff95ed37c0e6 GIT binary patch literal 728 zcmXqLV!Fb`$grS^>8wE$(@8c?Z8k<$R(1nMMwTX~T|l9228~x2niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>BwsYZZ1d~4+CO%EZ{410RQK&|;_e3)U$&oK z-)Qq+GxVw%=kuG)dTL41iyuy3oW?x=V}AIe&O@4}Tas(zE5wa19=5w_>~oiinUR5U zv6g{`0UyvqviyvU|5;d=nb;c)#6Wyi5TD0@i;V-4*qAwy-2sVu4*}^Y+}W;U_GO^G^9yuwAKoZZ}=6y5XeY!f*GLRZke3ENBc`#QNIn8T%hA H(X%Q5sXE-$ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.p12 b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.p12 new file mode 100644 index 0000000000000000000000000000000000000000..91af59f3398422ad9123335092ac804d5cc5392c GIT binary patch literal 2388 zcmZvdc{J1u8^?b$hB5Yi=u%{DERBpUA&DVtS+j*GWEk$Ku}@>EYb!*Jt(hp1oly30 zty!lrlP#+27HTvxRL0f2-uImM`Q!OM=X=ig`RDnZ^B@Ue5Eqib14E=*rLqM^{=}<6HjBJ(HGz=*0hD{)sAZ{lkK^!t^yxe<43D7tCqLo z99piQFPyR4P*Ws5eSO%0DXm&yq{(A?@H6ox5+^BqJC?MH(R7bm?RC3PP2%P;K97r7?mL! z3%_h0sIVx-r>`6j`3AM=ww|(yr;M_vGG@Y?J~!?n{FF>|eM!Z|q&cTTOTXYfc@v;-uKB1p;Hm8GsK)2ZS%0u8E^>;#e$os&6LBQWV(Ek9z^Am_A;?UD)nnwt` zjt2K8^NauZ2?Ti`I38?ddGB5B%M`s_)^@ef{RIWU$G6|@!L11EqwP32^~wL6>^oa><#F<7dzsE{sv<;PSB3>ZFhfJ?*~$X z%GT|K6G>^-H+Q_;J|&FMsjyeJ{9I>{O4m@B5EMe%JZ01)yOnR@Wp(l&>RUiHRV%d} z!sm(bx^89PTAN=k!g_6}+oJ$;H{qI2MvaNuS47`m7mz7=a)>xg+{73-dYCK!_D;L1 z|F+Fd{N&cHUof=`IhD`Gs-G%v*m$^D|=j2Bx>{s%Kn<{UBlWJYP>($J2 zf~HT!cV6(h5f5ijKbd~$uKMg?@%ccBk9I60O!`pB zZ)uv)Xd363y)DVbOIT{{)m|36a+AK%*Z!uIa@3C=$_W{yj30G&n28f}>9+pmvOIQ; zq3Bzj!w!;*zRe8-&1O_4okuMFelUp>O=PdA>%TansJw}9;UT*C5IUZPw4zH#Gq+B^ zWuN9>b3YeVBfLg#xKHFUv$^DYLT{kpdPo`X)Gvh!b2Sqe8gx!XsGVbV+veIH4{r9H zfF&vwS#xjoDux5eNjxP2Rl%#0kTb>K#Vb`p2|%>-2QMEsgf-^85& z%m=!^R;3=atcPyQcBvnBlfPG{!OE6{*EbrklZv*46wkW@*dwt9!>JYI;146F!9fy? z*yygk(`JFm_?_aGRdo8yMdOlOWw9GXpL_EKmiJIIwIWddA@5xC@dT9`sRt4pTZLLt zr+-B{w~)VX9_6(7XPUH1+(frk?z8wbj~}D?;y*Yo`q_ItXOiWX#PeyOs#^ zkn&5??uC)S$2wDvMkvsqo}Ik<*7HS`WWLkyy-tY-I_?TGQ$HF{eJY%F_i78Z9Yp0D zsVtX2mq~x`$m_;U_6X&SH=($faPd|KIRl7H*CnxB<*F;`j>3kbkoQ~~Auc9Dpo1u6 zcil4#%MEyLRX2NrFCY?1Ja(98BPe8Y*vih!PU+LTGZua9Xz`*_L2@y&r+cpVOK@m- z=z@}1J&CZMV?S$Dtv6&l2(6co-iVbWT#J$Ndi6!1plueLP{Vl6^To5yUWUS(eMraI zg|<-3X$Zp^#}8}F$2lOzPA|uw9BtOsxVaG5IopT`W@9C6;q?zvrc|jFZe^!U;X8Vz zkm3g9kF&l;ssmUKTGQX-?j6|x6?X*>fzrN3hL6E5;eGG}rm=K5Dip__n+T5jmzw W^-gFcvZFgI#7|QFCVxIN0Qd{~sa7EX literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.pem b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.pem new file mode 100644 index 000000000..286a0ef7b --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: revoked1.example.net + localKeyID: 3A 08 2E BA 85 F0 DD 7E C5 FE 51 92 BD 0B C7 35 9D 56 6B A5 +subject=/CN=revoked1.example.net +issuer=/O=example.net/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZjANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwNFoXDTM4MDEwMTEyMzQwNFowHzEdMBsGA1UEAxMUcmV2b2tlZDEuZXhhbXBs +ZS5uZXQwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAr20bGUprpXdQGlk/FW+RJ19l +FZ//slFysFeG3PEVjVjCnvsoxBFZJFVyfHhyxTvVYdoC6BVZfs9HRAjgZuBImQID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm5ldC9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5uZXQvMB8GA1UdEQQYMBaCFHJldm9rZWQxLmV4YW1w +bGUubmV0MA0GCSqGSIb3DQEBBQUAA0EACw87yNDj6DBkvF+i1qUyw6vqijmPyOQZ +4S+UOCyyNSsJrA1VMjRjAqGTgyU0OFtfcGuhvZ1ZnlFrvVog/icGcw== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.unlocked.key b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.unlocked.key new file mode 100644 index 000000000..412042feb --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/revoked1.example.net.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBOwIBAAJBAK9tGxlKa6V3UBpZPxVvkSdfZRWf/7JRcrBXhtzxFY1Ywp77KMQR +WSRVcnx4csU71WHaAugVWX7PR0QI4GbgSJkCAwEAAQJAMvRiFqqDMgDCB6U8qaFK +bEFNP0bGIql9wrLpvWtZc0CFyhV6LSjMBQSQp92r1tMlB4NKQ7leLb7XXgrPRswY +AQIhANW94AFeO6+yIhd1OQuizl8SBQwCi0gvlMqsrf3kyDrZAiEA0hv3G/VQWPKY +n/wikupIE/8jbJvLWLRYYWn6eGg6Y8ECIQC7RN0a1cFdsqkD/IS6mS5PRa5+U0xN +NsMawCjBps14IQIhAL24JLypGSEIBYrIl8uDIwxzYGBMmSQCzJ9Bm7onmznBAiAe +YGSy1e3Vji/YwZGuEyGrVl+BEIQ1p0vUgRZ7aEpVpQ== +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/revoked1.example.net/secmod.db b/test/aux-fixed/exim-ca/example.net/revoked1.example.net/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..d38550fce6ddfd8620de5070ef49abf8ffc80af7 GIT binary patch literal 16384 zcmeI&JxT*X6u|LkBEdqUjh)DV#dd)lV6lje1SJqJur!3hUq% z^aS>zvpW$Df>?zh|AEKMy!m?jt5+Hak%-hpwx2}y-B5N#wp>?+>?{Xvy-L)pzFP8| z?(FTe%ayI%Q^wlcj<09!@A4o52q1s}0tg_000IagfB*srAb)Zft~;e&_~hY5 zzpu`0VR9R#s@LuG)p5J6&NDqrjobAQXLgVbb&`icZmzSD(e0L*N8?FqTGkYSicMbh zax+NgVGyX1x%rw*O+3zY82G-WuL3nlqv14Evx$xhQ{5UYC!Ljh{D$uL+k7f<_kA9@ zbmiDnGmZ0PQY4uzSNwnY_w|#|Re$8-NBixI-`;5mAbkzTi!1nB7gt_2q1s}0tg_000IagfB*srAbjT&N zRDWtz>PcsX^I7Lq=U``9%EFYglvWl55I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~ z0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R*Ig{zm6=5iO#X z0uiMxQ@nDGs5GdGsw#?RG4&c&no-(fQIwDnq1|ootMxG%rW->eZuczAE-1|RjP!W| z_HfOrA2mdn-T7X3wrxVXc4t3}-C?(DcDo}fSxd_5XGt2PUHjUdre?Lj3?)PuCJQY? zO&8U9^L`m~|Ly~suGBq_m+jdzPE0b`D$>rLtIliLT@sSDGj;!Gj$O-h>N8h9^W4GO zxP!$fUcI>2@=imX?T0(8^Vg^bMJQE+wY%ExX<&q+v>MHtNpAF8?=A0WpjAI+lp3b? z*B~hj>B9f>(u6?f!|Pgq%NTlM{Px<WawU}VXeYQH(=1IqI%{*Ob!eD}VPda2F=Fd;W=9tlm?&FD&PPr01p>~?q-HjB2 zPE+px9X!#adHmO#hTrI!ZM`%xH@fk7NuzIO>%`|rocbarYyRP?)00I>%*4=rwuqV! ztL7BH`{Vh?)I*UWT6pp9ZJlXK6D!PQsUQ6MD=>$4Cm%qiOdY zQw-$%__Bh!%~?$=HXPmf)y~)f^Jdyd=S1(EG&}rY{mR0vN2BX1!%jw3BxE;FIOg#G z)I4L9E4;a3)pse8zO7rvA8j04)jqsIDBTH&2u3|b3DI>5g`PLjo$w1oH>yGp%DA^j zF%oKr`__j A1ONa4 literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/revoked2.example.net/key3.db b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..5f70c4b8ef503925e34fbf292ecfc9b1400cbcc6 GIT binary patch literal 16384 zcmeI$Ye>^k6aeu1cWbS5{3RWgWty*awK9 z2!H?xfB*=900@8p2!H?xfWT}KprSF{hJV8E;MZ{tz74-g)6j0x><}OT0w4eaAOHd& z00JNY0w4eaGbunqbUATImPLp-EFxc!og*PwQX&_zORy?-FvXQozN!2N4Rf1=k=TpL zo=>^HoiARgj2a)iYkg3R3&+;99K~_G6Cl7TR#HZex-A7Xzoe-0p4d_1|H1t=FZu zG4%mzo%DNz_2+yKkD-FoEy-~^*R=^x>5FZNYg0AP{jpWoR(toVLIR9ML5q5fHauc7 z@x#$^f^LtdR+2l?Olu^g{ehRTaF$rP{AG#Y6<-bJ3H3NzgPtPN%C4Sk}lX1Iq~ zl$I)=_x&yVTO$t|MzzUC;j_bE0lX-Y`s|}+CvXXoQa|8;-VVPXS6doXi zS)?>Vt`N(lv*n)x<^%x{009sH0T2KI5C8!X009sH0TB3qfr**?&w}0{00JNY0w4ea TAOHd&00JNY0w4ea(<1O2?~s@u literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/revoked2.example.net/pwdfile b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.chain.pem b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.chain.pem new file mode 100644 index 000000000..e87280122 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.chain.pem @@ -0,0 +1,29 @@ +Bag Attributes + friendlyName: revoked2.example.net + localKeyID: 60 8E D5 FB A7 97 B2 E8 F9 84 11 4F 91 1D 3C 91 B8 19 E8 97 +subject=/CN=revoked2.example.net +issuer=/O=example.net/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBTCCAa+gAwIBAgICAMowDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5uZXQxGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDRaFw0zODAxMDExMjM0MDRaMB8xHTAbBgNVBAMTFHJldm9rZWQyLmV4YW1w +bGUubmV0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAMj2mEnZY8N38XJ5ZLTymH2J +hBNiubBU4ddvVQ0y48E/b5fbYwJI458bKgyNhqQtO/MG15oIndFpbazcp1p8++8C +AwEAAaOBwDCBvTAOBgNVHQ8BAf8EBAMCBPAwIAYDVR0lAQH/BBYwFAYIKwYBBQUH +AwEGCCsGAQUFBwMCMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwuZXhhbXBs +ZS5uZXQvbGF0ZXN0LmNybDA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0 +dHA6Ly9vc2NwL2V4YW1wbGUubmV0LzAfBgNVHREEGDAWghRyZXZva2VkMi5leGFt +cGxlLm5ldDANBgkqhkiG9w0BAQUFAANBAD46Iw05ofRAaw9+yeTDPIydjl1Pkb1/ +ma4/qSK7p8BU/pMN3SH4qxKW7z6nNregMW48d5KcSxUPBmWmDCM8u70= +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjAzMRQwEgYDVQQKEwtleGFtcGxlLm5ldDEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAN9lXg/7R2gY +392B325b/0eHLOrQG1px0aPuSwCBG0cKwCATtsKjYne15vNXAskVAdejY0Ujvo+a +d4jVi2qYJ8sCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm5ldC9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EAlm29nFrjiJPaldOtHxpmWzE3Zxit +Sl4RxdeJcJ7aGL2gDOAWmiVh6UPbMm/o6Vg2PxHp2YviOhVunp1C2t85ow== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.key b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.key new file mode 100644 index 000000000..681886b9d --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.key @@ -0,0 +1,15 @@ +Bag Attributes + friendlyName: revoked2.example.net + localKeyID: 60 8E D5 FB A7 97 B2 E8 F9 84 11 4F 91 1D 3C 91 B8 19 E8 97 +Key Attributes: +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIfHUUKZHRP88CAggA +MBQGCCqGSIb3DQMHBAiGHts1xOcjYASCAWA+TB8P6+MMx7kHWAIrO7eIwxXI/ivw +gKWa/XVFtZeZcBYCdjR0Ubfsv3emeWtZ72badVNNOgbUqaMsTraqYePGS9fVIk8e +Pn3PjKdd7rODvSTN647CrN6ng0x1yYW/RVo5v5CnoantSojUY5eNhO+iSGPFgbvj +h8s0uKZ3+KxlySpIJX9RU/LJQUfrdCAGkdIuPEi4graL8Z9pjyORqppYNCI+u+VG +m76zMJq9vxBcn6v3/DpVCFL7gokwD0GgMtWtTeXiP1Yn92dsn3DPVNI/ieE1ogJs +8WVWmTNBm0UuN0GiUWqQUXv3cqFpNArL/BObHJGWyHObUz3FgDpkP4crmhrFN2Ao +cT34tYaN9SGfoYA+MI2DqKQ0M8aGBvbL5CVGqJqWiVB71jG+JsdS0Q+7K5JQ5d/O +xiynUVJ8FhZBQshqPXAkPD8lOeFQ2QZp53RUSlI3d04Cy8FAZr3HzqEZ +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..834df2ae209321686489cac1324d05690390148c GIT binary patch literal 726 zcmXqLV!Fh|$grS^>9j!;({VOVZ8k<$R(1nMMwTX~9YCQi291{&niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw}L5go#CnMd17dwPfq5 zOaaQ(4`Ri)&+#|lW#iOp^Jx3d%Lw!@1G6K8#2~wj5f}#E3^AG^M{ZqGET`}Q_*_XCSB+fT1=wE3?Ydew~c z`Aud$wIu1q52r6qW1jypKYUT=Ax+aQ$+htn;zkz_+ubzwxy!`N$iTQ*%Rs|`59lFT zen!UsEG*1S>_>Bw-46F?}*;uvtn3<$l8CXOn)EGaF+#l7m&HQYe#{tXAi8(XBvWR?;KF7`a z@_y*|`^y64eja}={**LY@JlekVG6Frv!0gDd`u@@fX-un`xR-=+Z`R5QOfY_Md(&q&9R>69*@en= zoUaybZ?Waqe#!Xw`RN~;VgVI#W{u(h_JBa7RWr`#H<|U+lB5?u zoW3}XdH%=z@I{@6G)=c8*Tz?f8(lnXchlJCE)z2&1LI;X0}TT{poe7n85#exurM>R zHyDV4_^Kd2j{z4O2P9oFb0WI~5*IxmZ;PvWrqpDvHRE2R;K6exm&|eSQ_V@ p@~dFGQuW+!x>|L^Nx_BR?klUFFg97x7_^A>wbwKDKUSh=RRFQ`)^q>> literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.ocsp.req b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..0c271ad05f837b60c46276d92d8da4983d038d0e GIT binary patch literal 106 zcmV-w0G0nRXfS3lKQKKoJ1_|b1uG5%0vZJX1Qd{bGv!&oT8y?g&4x(8IeC$6ne_w| z@Egtx1?k^a_ur;a9{I=T7v*?z0s;Waq9ZUNFdqg9D+U1t1qUzz0t6BS5YLb%V>^`s MP$PTbT^F~UPc&&F>i_@% literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..f110fab436db84d40b3cd519b332798499ba7601 GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXOn)EGaF+#l7m&HQYe#{tXAi8(XBvWR?;KF7`a z@_y*|`^y64eja}={**LY@JlekVG6Frv!0gDd`u@@fX-un`xR-=+Z`R5QOfY_Md(&q&9R>69*@en= zoUaybZ?Waqe#!Xw`RN~;VgVI#W{u(h_JBa7RWr`#H<|U+lB5?u zoW3}XdH%=z@I{@6G)=c8*Tz?f8(lnXchlJCE)z2&1LI;X0}TT{poe7n85#exurM>R zHyDV4_^Kd2j{z4O2P9oFb0WI~5*IxmZ;PvWrqpDvHRE2R;K6exm&|eSQ_V@ p@~dFGQuW+!x>|L^Nx_BR?klUFFg97x7_^A>wbwKDKUSh=RRFQ`)^q>> literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.p12 b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.p12 new file mode 100644 index 0000000000000000000000000000000000000000..368429e9216f44a9c82a0fcca6fd5c56c9139b26 GIT binary patch literal 2388 zcmZvdc{J1u8^?b$7(26g=I8tu0Lu~pEt7v{&BG0Gk$6RHDeppEe!?Y!w5IfUoTE2 zHCF#N)1yqN%YLNMqZoFwJsUq3C%M2+I1wrGPT}Lu-cF5rc4F&GDzdl%)ii zR2&0?F9qi5=k*17E95VTdZ{El%&QB@l%7oz#ToE-Rg1t9(1`}u)4u&2`2;O>?+nR( zUhEOXX&0VOe_tvpIN4L3H91ni+bWPIEcaZw?3wmvh>^$DhXDm zwLEbe>NT5Q!{e}4>$sfb;i9A0xz$EjEU{d(20~%3{->S`u?fuHhg;(Nwdo4vmJ99j z2-ymOj8{WBb^&^#A%gI=ffAT?Ge zD_NXe+_V)aUu)RyBztEFkx-hUM(2o)^7@jmAWNjZS3`9*BYQk;I-DFHdp$5-l;<-d zkNm)K;Z&}nHU9Hd9=M9aNhIJ8xBfyL%RhTWpmqig)CDgbyDe~a~Z%t>hFX=D2Kp+LBQWV(Ek7d`3nd~*&LVU zaDFE;$g9AUmmKvM5R^mUAij}MLFBK#)n6=dFMwq|CQRhA750=fkEV^^I*pqj(cwA3 zgIP3<493LNKZAEO)1PmhZ@3``VG&CTlSczMe;W~G#G$V6eEM|!Op}J&lvYpbn0EwN z;9`_)GOL(L3$LpAS(XPvvIf?8AMX}#uE z6Y6u1utH5{NbM7Q`uUWcleOCM;0U^L9-yqe)n@0trFBcr-@Z~z5xsc=5vn)$8T=Yc zgSvGHLk+GayCvHcuH9$I)khnqECeej?guY=cF+xx4~;cZ6O4kdn|A#F}R?yb*i0Z=j^upTQmXu+D3-8{=`oH_uh8>l5ULKc`veBA9$%6pu9|Lw-* zX6!`ca(k8IrMJ{E!abKkpNaZA^zxLkt{1o1`}@SUfL&Fgb6&l><+&U__U8_C?dr!QQx>G?Ms4is<0{o00e z8?!#k>hAi@eA!&MjhI!=XJ!lq+VXH&cY^sX*zEZDbi-E7y(Obua+xa!{Fju}dlw{| zcRK2OS9`ZnG36G=bOPN+{d!O9XKo81Q$hMJ>Vaapc4PmnG%4lxv;U-YDZPoNt6 zJ=iOC6%%l8jo5YbYn@^i?kODPfDglIrQ;TV^=q5o>K}lwm?ce$tr+7Cl_s;(XH=<{ z%di%96C3`(R!Ucs_sX*4vkwC(wupG{yi}xkOOF)mg2so6z8bOjD^#bfGcE4BK_ZOa zDY+ZAc{Shh^Kv?1Yjv?%)v9>iHYsw(8*IZKWOy{)tU`Ky;CAPui~fsM#hx}FQFwA~ zGu^lFhtgy70t)o%n%@H-${pZcw>_qN|Cq&VqKSqxo@%XBDpkD|NsI2tGhDu#xvhvg zQpEN)Ng7Mm)RA-O|LG$hR*IBwiM@E#q7^Ew6;PSo_A_<$@W(4U2QBhblq<)-p8Dh-JIEwW!W#sQREp^? zP6DQz*JJcZ8<|*Ufkoh$$8Kuw7II|U$Bv9wTMu$Bes$BH>>y#-<$OANeXxAVw#~YM zQTc}OfvOf~9Co_ih3x-Mqn>d#*&M-B%CfD&6bC&lsgyZoM|l7rPB3}TVXT_6yS!0hBU2=067kceCWU?1!Nfx>XeGg=@(xTPg z-C1s%142gKFTm&Pmjs{&7K>tB^#C;qR`$oE%X6@F4`ZCH$4B*6G1R4n4J{&3Q!j$@ z&U=X_H{Yw{J1645syeLe_`3BMz2wKIS=s%kz3z3tn% zXmVjc0#g;v*K2#G{iQ~sOkUzVtCbd{@%ep|jmlTSTTE{&;&(nFaXgi9s*2iT8Gu5B z;_(?pP-ka0cC_`y2hMa4ngDcjB@FR-!`hHWqg`g)GUOzQsY`z{kJow2Z3kjglguoo z-@22R+-O;XWEh93pX-okj)TekA7Nl_O=7Dgb1USHATmUD$mNsyruVcFa literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.pem b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.pem new file mode 100644 index 000000000..8862a6b78 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: revoked2.example.net + localKeyID: 60 8E D5 FB A7 97 B2 E8 F9 84 11 4F 91 1D 3C 91 B8 19 E8 97 +subject=/CN=revoked2.example.net +issuer=/O=example.net/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBTCCAa+gAwIBAgICAMowDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5uZXQxGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDRaFw0zODAxMDExMjM0MDRaMB8xHTAbBgNVBAMTFHJldm9rZWQyLmV4YW1w +bGUubmV0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAMj2mEnZY8N38XJ5ZLTymH2J +hBNiubBU4ddvVQ0y48E/b5fbYwJI458bKgyNhqQtO/MG15oIndFpbazcp1p8++8C +AwEAAaOBwDCBvTAOBgNVHQ8BAf8EBAMCBPAwIAYDVR0lAQH/BBYwFAYIKwYBBQUH +AwEGCCsGAQUFBwMCMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwuZXhhbXBs +ZS5uZXQvbGF0ZXN0LmNybDA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0 +dHA6Ly9vc2NwL2V4YW1wbGUubmV0LzAfBgNVHREEGDAWghRyZXZva2VkMi5leGFt +cGxlLm5ldDANBgkqhkiG9w0BAQUFAANBAD46Iw05ofRAaw9+yeTDPIydjl1Pkb1/ +ma4/qSK7p8BU/pMN3SH4qxKW7z6nNregMW48d5KcSxUPBmWmDCM8u70= +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.unlocked.key b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.unlocked.key new file mode 100644 index 000000000..4c9010528 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/revoked2.example.net.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBOwIBAAJBAMj2mEnZY8N38XJ5ZLTymH2JhBNiubBU4ddvVQ0y48E/b5fbYwJI +458bKgyNhqQtO/MG15oIndFpbazcp1p8++8CAwEAAQJAdkDE9A+7qLXXmejc3a0z +FgvpcA7T/XK1QjP89DtR0dAbM0tLdWyhshLNcNSW6urwYKkPmw7jPmW1wC14/Ob3 +IQIhAOg4d+nA1BNR2+L2dDJhdTPWzVWERwsMaBVMsKYg8TbjAiEA3Yq7xYMK0aNU +XTvzTnmr+y51Ce5BQK9U2q/B1kyIKIUCIDQZ902K5govo5YYlZl4JEOtPgSh2Q6x +iei9fCTJ31ThAiEAg28IQYCiDYeJyJqFmZwjxSxlsVORkO+0Nt2o8RuMeAUCIQCj +IPd5zjwu8dkolqvof1uMm3An3YhSLWSlJK1BSAk2Yw== +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/revoked2.example.net/secmod.db b/test/aux-fixed/exim-ca/example.net/revoked2.example.net/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..a2fa5b6666d506582cb53e97317fbf82e36d7c05 GIT binary patch literal 16384 zcmeI&ze>YE9Ki9Pt&|Q@UED+t9I_Sa9vtc-MJd!5h`DPCO)nu$r4BxZyN}>gI2T_* zpTJ%8l2o(^;#7)!4}RR;@BaPrnInz;KtyUH+fO2UZYVnpCX0DU5(Z_8w4<>1B+ScTr3Qd;x zGc%0lzUQg2x%rw*O*l!k?^S(UUwLX62cxO4W~mNxQ{L(=C*75MstvvGw^gag-S>Iq z(v@RR%{0uSG>;NntW^Ku-`7ukSN)-jAMLjx#1gyRali} zB0{cF3bj47)}Sh?swmQ83cS5?PG!4AQ33*loMI1?BTR+|j6tD8-79mKl@z&SJ#Mc( zLn}+wIbBk55RH39gZrgqiZjTYtJ*)O{LCfH2Gxa*moV z8kR2kapvsC53-$(eeti@a~HJCHP|+%{qk$W()PxR0M{lu7_PVE@X*v+q zRNhi|<&b6fsVLipF~Q5%s|H0V^|#4Mo%b|0R8cyNW@*w6`mGPw?r3bV-e%M^Ox@?8 zQ5e!i@x|5A-t2p-JAR)N(=zMz1IHHGtHav^0`qc$E^Qi>&{mLiW$m9eQMPM)_bxqj z>i!98{b)mV`o6ozpG@Dd?VYsk8SYYV;S!C@>$at@@D>!87J45S+Q|Q1*{nTkeyShW zt9_4Y)}Cmu2#XN+73O;iJ^42MG9jjEkFxipbAwFir#vF%C|`Mu@RdjRVSHnU2~p-Q zeau~IkL^}hLd+1tJ)mw4a-4mP9PJx6w2!{c+TsE8-KAxP#U2qPjymfc>m3CSm&4|` zobp=A%9K6Ho09h=->MY`=m!A=5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 z009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0;re=cw%w!K4Gw8(aYw&!%k zw$)x)Wj`{!H;ru%B;qUk3vjo(7YF~9RbXvBThZ!S*pc<@v>!f?bS*z#e`%hmh|CIl z&lbA(Nc|(_Z-4vSgX+<6rMW&YbK;>5o6FaJS@r0~$shXy+%CD`Utw)Mq~0^oEo8jj zHr}Y^rRC(>=-P>uQ3YOaNpf6VUTIPH)Nx#qmdGyi#%j&IAhpoN>ynh0`@B zc8wpsWT8DN-@0q=;*h51btPL*TMyO_`#NHCbZ%S5nfT)G+ZN1lhP0ikI+q;o*}7%c z>DD{zyGNge;!nKV7nF_=qVEj1p4Rp!I&SczD)gB7^Z~`N)gJe&_hY+RFk9^-tS$6% zPt#wjNrcHYs;ZUy&aQHI_xhCvG|^s#pV)J~f<)KNX5DX%A89^?6wQ5XSZap zdhw3TqRf~yTf_1iZ^0iAJ9eg(CDyGUS~-8h;Wx^fQr8XpaMaAYz@(NPUww2uYg_Y% za$k*C9F`UD_N;Q_&(fw>bhN%iL4*u5nWvhxMH+?}lz-0D0o8os_3tZ+F-B_3BV2zk zl}c;ZU#7S$uOzNpQa?_P)8`Um94W)s^cA=7^&4sbq>KsQOgSSH-rN#6Q*+N8hFA*flRaG78GwNLRApgG4s?UXiAOHd& z00JNY0w4eaAOHd&00JPeRs=}s2X%ouMQx;3QFEzjs$7Nu0T2KI5C8!X009sH0T2KI z5C8!XSRDZacg0ILCe2>>z#z@s!t~*@kWDEk_`+}wpN@0*@dP8x(5pGudP+gwECrQ?R6NzP1Y0VQz39SG!4iRn;#U%a&TNM6h+b_qPP(}LJ(Jk zpA-r-&||8xu8yv;?ppb=fO~=f2!H?xfB*=900@8p2!H?x{6hf(GQzo{Q(TcPgL|42 z6U*l^1l)LJlZs{ASdspIX4;q#jTFJl{(eC-j=?+TgMBI_dRaSznl&(tn2LpcVH!*` zdV7x5zlf%n`z`6CG3VSXMAM<9J1lZYHlFF%I=i**QkK&AOgoK2O6Z}Tt&tPuBYCrB z~FS>b>AoU9tURLs(7ZJ6dwjhl&>5yZh~-q5Q@- zHN!GNQTDlElfHdbEi&;jS%H6{Q#Vois!8rUE~<^ZX%~0F)F66K#yuD8X4lLBD?ll; zXl<+77C>PSgp8b`J)QrXomdbQ4h2wq7bx#2pCM@`9b zU~6hUw|AC_#j#C%Kyzn~h>*PSLmdyfm%l^R;Aqp7x87j{H^=^Kr_S_|D>v!p!V`dP6a@EkW9D zsWiXjIA6DyC$Ez(=ZF3*(7csmM}c4L288(l literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/server1.example.net/pwdfile b/test/aux-fixed/exim-ca/example.net/server1.example.net/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/server1.example.net/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.net/server1.example.net/secmod.db b/test/aux-fixed/exim-ca/example.net/server1.example.net/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..53530874705e5329fbe8d61f65c9d325bbd1c915 GIT binary patch literal 16384 zcmeI&O-jQ+6u|LkE2RsmZrq6sxX7;10|Xa!BSk6H3&dnvLeoh}QmG4%;oci~4A=Dv zdI1k0b|$H45yVv~@*jB2*PEG_-#XGb3`C?RvimG@V283NvST|J(p(Mfez{OD`*N#F zx;J+(cFi@H<6`5jS=F=gcX<#21Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009IL zKmdVl5va-Q{-X8NTC}#MBI-Z@0R#|0009ILKmY**5J2EB0u52}w)RJO&mN0xREtNK zgMm6Xh0aWnsD7_IP$!*^x=5p0qHWe=n3`ccisH=oa-H4itkc%>U@}c~+vvhmq0Wka zriby|_dGS$w_lT7hm$mN=Um^8u01tOf>G|P*)$3YU0&*~Cf&7rs)XM6+p4A5-uHRr zDjjQcrt>h1r$w9^w^RLx|4={mZSlu8eze~{`2B;100IagfB*srAblL E35N7b!2kdN literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem new file mode 100644 index 000000000..4d4431b2c --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.chain.pem @@ -0,0 +1,29 @@ +Bag Attributes + friendlyName: server1.example.net + localKeyID: 4C 81 72 95 D9 D6 9C FD 7A B1 C0 66 9F 85 A7 01 93 A4 6E D7 +subject=/CN=server1.example.net +issuer=/O=example.net/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAjCCAaygAwIBAgIBZTANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwNFoXDTM4MDEwMTEyMzQwNFowHjEcMBoGA1UEAxMTc2VydmVyMS5leGFtcGxl +Lm5ldDBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDCtN2Y0S4oROnlfkTeUH2ULUVs +RShAIKdxlXRo+F09rEBzNKKNC4ZWIr+pc8U+iQzGGTiiCTfeq9bI0Uef1493AgMB +AAGjgb8wgbwwDgYDVR0PAQH/BAQDAgTwMCAGA1UdJQEB/wQWMBQGCCsGAQUFBwMB +BggrBgEFBQcDAjAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLmV4YW1wbGUu +bmV0L2xhdGVzdC5jcmwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRw +Oi8vb3NjcC9leGFtcGxlLm5ldC8wHgYDVR0RBBcwFYITc2VydmVyMS5leGFtcGxl +Lm5ldDANBgkqhkiG9w0BAQUFAANBAEMi4SnbMDOvnQk2UkvvNVGyBEXNsuskNzo9 +5wAY6x0bUZ6XWZ8+kM60gbmOqwfPA6pw/w7ui3XJ1Ac3BAUverQ= +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjAzMRQwEgYDVQQKEwtleGFtcGxlLm5ldDEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAN9lXg/7R2gY +392B325b/0eHLOrQG1px0aPuSwCBG0cKwCATtsKjYne15vNXAskVAdejY0Ujvo+a +d4jVi2qYJ8sCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm5ldC9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EAlm29nFrjiJPaldOtHxpmWzE3Zxit +Sl4RxdeJcJ7aGL2gDOAWmiVh6UPbMm/o6Vg2PxHp2YviOhVunp1C2t85ow== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.key b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.key new file mode 100644 index 000000000..d01d43b71 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.key @@ -0,0 +1,15 @@ +Bag Attributes + friendlyName: server1.example.net + localKeyID: 4C 81 72 95 D9 D6 9C FD 7A B1 C0 66 9F 85 A7 01 93 A4 6E D7 +Key Attributes: +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQItqv8KkyfDOECAggA +MBQGCCqGSIb3DQMHBAi+cLfRJYwdhASCAWDijpItKwM1N1Tk9po65/Et0DLcJt8h +UNc26UWxg4uGMcbyHJv5+OZDhAjla1GwFLBZDQwCsnvwfjHfpwFpSx4Mxj4SMGrx +YCwSB8smLl5cZNJpm2N3JVlrX/ZHR1plwtVccOf9Ry7MFoyj9YcXTs9N39zmpYDD +Oi81eD2CzGEP2NqyycJK3Fu0OMUNT5RYHF7Nja6mGjzyul8rDPHPOcwQ0CCEHUmF +3FaMqji+aCpJ+BeFwcVYZjiuQx4ajKXnu8g4KEa1S59KgSRiAdL8Ih1dN5qrDJB5 +dDTo37DneR1RkudMs2OcbMnbhyWQZ/AhfUqqFM7NLnDSVwhUtL9kPzjqIA1+l9V6 +27ANditdhs3fS6026sC3MMJRrPXmZGU3GuItxi1hU/CjiCb54VsK8MEhWpzU6QiS ++UXkPYKauZKsGtfn0sI8ZUCEyo2vF79KAIGK6DYQ6dIOmjvKqz2xgng/ +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..8dc2a098eae72cc77aab0682f9e25eac27ab6138 GIT binary patch literal 725 zcmXqLV!Fu1$grS^>6Aee(=j$qZ8k<$R(1nMMwTX~?LeW;291{%niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw0r#RZv?NDjO&o$Rj+$#3IBZu;A$SW}b2{ zvu9tnobbFdX{iA(8>d#AN85K^Mxb{Ym>n4$e=WMd+12sKW5cM0k}o`@zS`*Q2uLuW zbm4sF8QJe)pZ;gQHVku=c(qLB)uE&HTUBLec5T(r2wU~$4BNRooYnUiG%aS zaRU%*EnsG1WMX1uMzhJl7)L-#8%RO|QV0@|pfJqLOIL7CEh;gP6X!(=N#iJSUSkUb zSil-bkrO)xF~}}s1cre(gMkN=Bg01f$FA?K+cS;ozP(M{{lMbO_S5SdZT@S9UNz%< zev?^GElGOu!|99DnCE}Y4`0-INYivna&3HtxY5PKb~lZE?lLhmGB7UIGSD#K1A0i7 zpONuD3kx$7dxL=(h_4Fb^B8ckaX?ZUGbge;AaT+2@wT{{XG)E?*UF#W9lL)WZDo4i yp1U>tgr#xbDZdJ~D^<_!rmIyqoD^L6?Y^?=31gE5jX{f8Uwb`c|6?V3Rs{erwBh0a literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.good.resp b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.good.resp new file mode 100644 index 0000000000000000000000000000000000000000..b2cb446e798c4d4cafda463622f4c537489530f5 GIT binary patch literal 706 zcmXqLV%o>W$grS^X}dua(`GhKZ8k<$R(1nMMwTX~B|xDC295g{niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>BwJBa7RWr`#H<|U+lB5?u zoW3}XdH%=z@I{@6G)=c8*Tz?f8(lnXchlJCE)z2&1LI;X0}TT{poe7n85#exurM>R zHyDV4_^Kd2j{z4O2P9cBb0WI~5*IxmZ;PvWrqpDvHRE2R;K6exm&|eSQ_V@ p@~dFGQuW+!x>|L^Nx_BR?klUFFg97x7_^A>wbwKDKUSh=RRE;~+%W(E literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.req b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..0057816d428e72decd0cff82e08b060d552f08a7 GIT binary patch literal 105 zcmV-v0G9tSXE0?jJ}^8mIxqBBQPN_9|j341_1>H2QUEw1QG-gpvAX?40lR4 L=Jd44Nz{_19oZ!= literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..5e9cee6f6a2e2254b7db2ce3ee1c98e6bc4de78f GIT binary patch literal 728 zcmXqLV!Fb`$grS^>8wE$(@8c?Z8k<$R(1nMMwTX~T|l9228~x2niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw92E1&XT5TR}-+38zHs^1WeI<}qt{O=JlOXBcU0lc^7rjurZ5IOTWGO`Jb#tS?EM9( zvx%|8poy^sh#P=dYXLJ8BNG!NGn!2X#yG-K+CUN#mO_xQ1O;PeUb=#FYEg-SoH#F1 zU>Zk>^BP+iz{1uzikt{Ch(UH4BQOlS84Ns_92qv+KX!d@-JWSw_w8-s?gtiMwx3?# zX!Bn)^r{)>^P9|iYDvrl568D#EmWd-vGl20b060E&-*OCAO4*G)I@act#|4%zjWSt zXk=yO$KKpoT~?Nl(*wM!ZB*i~(gaMHU)>-}_2a~lK@B$Y9K+kgN#Q9+`f7f55?y_g z7w=qbeWbMVUbo1wVtz#sr?VXK2if#x%+e*ygy&^G{Eyfqfoo0SLFRhxT-{Mx=Uc~~ zovkvZ9dLfmu_5l4{HyFo?eLZYNWb0`@ z+tk=}2%9I!>;3A$tQDQo)K)k)zmX_>!zIC{soqTguIymo!w6sJP&oItEe+d@pX<_> z!jc_>-@041D_sq&B_x?%JIVi)RiJ_qJt!a<+E`Duk+#>1yq`(3nYyBJDp!1S=!-w; z{6}51$wLdY8%qB_PZg3vtI4YX!2l7U0AYVA8qnJ6;eaP_0SE&8w`MIMU`s<#`~JHo zjh2B(;jU8d4)$eiL_Vq~WyKbNk{$%~1Ao=u`G93_;Q|H$fA>KDg9Ge04j%ivrl#Q? zG0E!$qO*Q2=r<18Te!h|a~NMC^y8S<*CjNoWKG3HpO3IRXf-Ocf#04u#l1aU&D1~) zyWEUjUI;W3ydDLUqTG5zBUROws5VUEI-E&g?PSVZ>2)(1%1~Tpp-~ydX7Oxlm;-{a zS+w%VDj-zN>;8GF+)Oc&UI2ZJWo8Uf=1HfRJ8-pL<{uL=9@Y(zQNL6E7~Kkj`(Z9R zcf5+5s`9eG!1Rc6{orl;5Lcb|!jw0iDk1H1Wx%D-CtW$_(m-8*RXn^bb>YUjS@Oxf zMa6vI;2F-uZFp8gw<@QzFTq;xo`L9b3-6kjI1MD*mcO2)o0x#pdLdgYjr7v9GRxex zJw1U7c_2*`9&zCz6-;f4%7s&Oii&GiqHUD1ne82oGieq#G}%%wMd2ouqg_VEy%zT) zu?gPgG(Mg1r}|=^Y1p9iBZCu8)#Q#QKgg7Ws)p&a>uP+5GIs;{3O8-L_#?|r63em@ z6iw|w2Sj_jMfIji!@*nWXr7jrS0TfLfS(&&g~5FK{!!Wep7u8X--E~1Dh zC5!t3MmX4RlqBJx$Qw#6N>!JuYo8ZP&f!-(B+O>Alcngo2g5_ZMQlR^4|(8SNtl%F zc@wt#<@^g+lJ?&k}8ZyTzANsvIKJQnjc;Wc@olUATi(CMIJ zwrRqJE86dO2Tn5jjv;?cI8vEM0WJMWZm_KH(qR?uchs8zn;~*lCy9J^mBCi^5^p(^ zoNf)C$Ii4w%(5E2o2|!Gis!^X*|Uc=4#P5WY5HnU0}l{=+S=Rr%~966(b(Zk1$@MPTnt>+$-VbU%{Mx;T5q#! zJo7edr7-1<(?v;5aFN$b;Oysxk}g9ZVV(<}#)RXm1)ZP#Jlg&$Z14jFM5QCHpYiA( zXp_Nhgy2zeH|<(OR;nY{6&vH5Z@G9{JTp!93e#F5jQ^Z>k8$gy?17JN6wQR-R|su+ zA0G8tWi%;T8A~_kI19FlPK?&xJ$RlFkCyxCh~uc z*SA6y1bh!QA@@BT#At%MWx)JFBPHIA7`CT!ix)g(cPsSMw+T^dEnrHof!W9vGudk?xp` zp35|5RnNQ&w6TU8is~UIW{s{W4ic(pU z(*&x6Xq)A9X65YhebIG|u{!PxOI8lXDckt*1r&V?^+PTNqG-2J^O#B?rh8<3!k4^S zq8Z@1LfrdGrUZ&TEd%P)wYzt1`%iuw9;Z}`Dm`c5I?RoG^GUqhf?G1zJJnpqT(G^l zA<8{n+4_L2F?Eml*7^$ajtklp{5fjU6vM1Da8%Bb4E4r@E<=zyoqgbweia$R%4DAGl%PD-3y`j;}pv^wUlj~p@dxYPoL2u99O(_z)5?tg~Z z-xXzqQbY;Cpc*0qU<4F^NXfqFl5=$*2tT^Z*~N9^%={t7Yy(8B7OQLE*5V%hiCwfT M)SZF<9by3R5BTUtj{pDw literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.pem b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.pem new file mode 100644 index 000000000..4d14e2003 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: server1.example.net + localKeyID: 4C 81 72 95 D9 D6 9C FD 7A B1 C0 66 9F 85 A7 01 93 A4 6E D7 +subject=/CN=server1.example.net +issuer=/O=example.net/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAjCCAaygAwIBAgIBZTANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwNFoXDTM4MDEwMTEyMzQwNFowHjEcMBoGA1UEAxMTc2VydmVyMS5leGFtcGxl +Lm5ldDBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDCtN2Y0S4oROnlfkTeUH2ULUVs +RShAIKdxlXRo+F09rEBzNKKNC4ZWIr+pc8U+iQzGGTiiCTfeq9bI0Uef1493AgMB +AAGjgb8wgbwwDgYDVR0PAQH/BAQDAgTwMCAGA1UdJQEB/wQWMBQGCCsGAQUFBwMB +BggrBgEFBQcDAjAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLmV4YW1wbGUu +bmV0L2xhdGVzdC5jcmwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRw +Oi8vb3NjcC9leGFtcGxlLm5ldC8wHgYDVR0RBBcwFYITc2VydmVyMS5leGFtcGxl +Lm5ldDANBgkqhkiG9w0BAQUFAANBAEMi4SnbMDOvnQk2UkvvNVGyBEXNsuskNzo9 +5wAY6x0bUZ6XWZ8+kM60gbmOqwfPA6pw/w7ui3XJ1Ac3BAUverQ= +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key new file mode 100644 index 000000000..422428342 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBOgIBAAJBAMK03ZjRLihE6eV+RN5QfZQtRWxFKEAgp3GVdGj4XT2sQHM0oo0L +hlYiv6lzxT6JDMYZOKIJN96r1sjRR5/Xj3cCAwEAAQJAYR333g6QeFOPWwH1dfIu +ASfnlc6U+g+PlY8XhnhDgcu2le3IQuOaI0sw/X0vZdhEKJpDHJ1hKGxIQpOB2R/P +EQIhAPUMh9+sUsZSnNbhEggO8h6F4TeLoAVJNzUtW5UvmBgvAiEAy2hlFkLXlP0t +VYwmNqyCs8Jhf0SIrnhPw3ynJhxgYzkCIQDlHd48yAZs3/k9ABu35SGEYHD/WlE4 +IAi6c7pZdrKiiQIgEH48hBuTY29L973Pc2t1haHjSfCCrLLwtMcsvnhakHECIEuy +0/MQz7IYZNJ7g36j3jjv8vFkAdDCGyKzuMGLoq9p +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/server2.example.net/ca_chain.pem b/test/aux-fixed/exim-ca/example.net/server2.example.net/ca_chain.pem new file mode 100644 index 000000000..39e5eedc6 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/server2.example.net/ca_chain.pem @@ -0,0 +1,47 @@ +Bag Attributes + friendlyName: Signing Cert +subject=/O=example.net/CN=clica Signing Cert +issuer=/O=example.net/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjAzMRQwEgYDVQQKEwtleGFtcGxlLm5ldDEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAN9lXg/7R2gY +392B325b/0eHLOrQG1px0aPuSwCBG0cKwCATtsKjYne15vNXAskVAdejY0Ujvo+a +d4jVi2qYJ8sCAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm5ldC9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EAlm29nFrjiJPaldOtHxpmWzE3Zxit +Sl4RxdeJcJ7aGL2gDOAWmiVh6UPbMm/o6Vg2PxHp2YviOhVunp1C2t85ow== +-----END CERTIFICATE----- +Bag Attributes + friendlyName: Certificate Authority +subject=/O=example.net/CN=clica CA +issuer=/O=example.net/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBaTCCAROgAwIBAgIBATANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm5ldDERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAzWhcNMzgw +MTAxMTIzNDAzWjApMRQwEgYDVQQKEwtleGFtcGxlLm5ldDERMA8GA1UEAxMIY2xp +Y2EgQ0EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAp2tm7DhEtMNQPz23MpsxYVje +SgMgmkDx8qdr97SBBVqtPcHMMrCEZ9dQiYCFxbshxXfeova+DbLZISDlHA9xjQID +AQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjANBgkq +hkiG9w0BAQUFAANBAG/rfiV0UE6Q//VIKN5CprvNXDGQFfcFCWNRCu6ZGTPpaDf2 +iPqVISD9trZrvtlUIgKjGgOQQbdNH9RBj5+6QKo= +-----END CERTIFICATE----- +Bag Attributes + friendlyName: server2.example.net + localKeyID: E6 14 E8 D3 C2 D6 33 C5 46 4A 62 47 B7 C2 BA D6 3B 26 F2 56 +subject=/CN=server2.example.net +issuer=/O=example.net/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAzCCAa2gAwIBAgICAMkwDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5uZXQxGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDRaFw0zODAxMDExMjM0MDRaMB4xHDAaBgNVBAMTE3NlcnZlcjIuZXhhbXBs +ZS5uZXQwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAoXux6WdUK5xq7w+eMCFo2iEE +GCUYpmqc4H6AmgxmglEfrndnKMv/fLRJpMUMe65a2fIPdMaZO6uX/fBDYSeUjwID +AQABo4G/MIG8MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm5ldC9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5uZXQvMB4GA1UdEQQXMBWCE3NlcnZlcjIuZXhhbXBs +ZS5uZXQwDQYJKoZIhvcNAQEFBQADQQBhKq+CoKmxvdEJ4+AlNsJGpByKiwsDo0Cz +mtgyGnn4a+3kkKYb2/KWosrBBLIzZbuzQ6sAjDKKioKJy7+ENuki +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.net/server2.example.net/cert8.db b/test/aux-fixed/exim-ca/example.net/server2.example.net/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..0478b4b6d082c635d6ee545fcd42721ba6f8c6f3 GIT binary patch literal 65536 zcmeI*e@xVM9LMp`_xnB06TKMn!xK~vjWBicxr4-r^FS(1SJP$1(79c7{15~@uE<#? z%*Y=#*-BF~BXPQNSpG;iO-&muwYKcX3|!)}TJ*!rN?Og)_seM>gtKGLWqW?vci-=Q z?#q2XpT~XPf4)8^%rPDzgervTVsRA2o-xkrepmwIx$gbaAp!^>fB*srAb^a$T_+YEU>2OGg!J z*j!TZ!-P9`zB}FR+Ujkm~~yXG`3N>MsZ7HQTm#?)`pXEZFrXfx>==HM~t z6k4_@|9(-DfBJoOoxe>Pb#l_Cy&ukY)Wvj!_0OLXerD~E)b^tE^Gp9&m1w`PYgfts zmYE~e#yG7md-uHwpJuOoWlz@YIbNT?xIpLfd+phe`isha#r_3C@A=;=Tl62Q9}~j! zYVUnoG$9mW72^Kl!m{GBLc8&p5MzZCO5%<6>@F?GY9ZAw+xC z+;m?uw(?2|>NfA3h(9M6+1kFSZY!JBIr*8f-+dIHH~(1UnQ5XrescIb_NZNl8XvBD z>ziL5QV+){#~btS8o7UEebv&>R?Jf*D&x@Y<-faJ?Dh8{M+{2@$Sg>mK9%S#FVXnc~WcJ?Tx|NW1)nS zZw{oSV}SL&1`Bz;?-;?-)m`39yCEktj5YLTv2+~Gd;qFpV(ZB$E^ z@u&6^(XvL>^lE7eREw(j*<+i5KCSWY8xEv(-*6x;?`k8wVvW4Ia9exf%rWcc{uHrZ zCKk0Onrun7O>@_sTC})+U_s4{gsoMDqmFhyvGbmd%>x&1&1*Rq;eT)K9a~iZj9 zdM%Y&+r^SAugtGV2};Zp$7%Gq-${ zfzNcBR;HCEjns%9grJ6sk!3y*@d26BOq13!*4nHe`UAoU&Vj=@+dSsdgvRj!WDQ6UXPdJ5^ZWAKmY_l00ck)1V8`;KmY_l z00ck)1eQmjHg~J9on2ylcL~2?&saf&x7T-dG(SF^;5zL?6w#&+s&>B~M4J~h9? z39qZHTqu9|9U0h5_e#GqF~$mvIxAq@ddlfbxn`_a&{es{CxH-&&cq8N9U@}Lh*)X} zDHNTG7f{d(+|-b1XlnSs{8+#}K>!3m00ck)1V8`;KmY_l00jP`02Q%Bq%esTx;T<& ziMRwl=_nw@$T<_sciyb`=QGopO=FqZ=Vh0OORX1`c?B#Bs|eS?^g;@T(K4~H5BBee zQleJ8m5(2laMhHPVb`BK&_gObWzX(vF3frsGcuCcmP>+hv(nj550ViI4v)^MHfZ zUss-pjp?;HZSE19V%b%u9KQK1W@ep+&6G~J3&XyRw3sjzs;b=euUS=QMNFAe?lxZ? z*l$u8#cnA+W{&(+epRX5$uy__ovB~$KT-}2kI&scz35>Z0Ku)jwWN9YdF429;a1cRBhNP-ey1PAqfqxv1;A4oy=`&9uC@NLu_=L$Pe5z z?ACTTX;5P%y;HWqf{09>@tjq-K3>e}2`X${A6aM=To8L~riWq%`fTX=5Zeh7Nwl#qDLg>r2&hK7?)2RrT`xXTTH? b009sH0T2KI5C8!X009sH0T2Lze<<)1+ZKg4 literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/server2.example.net/pwdfile b/test/aux-fixed/exim-ca/example.net/server2.example.net/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.net/server2.example.net/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.net/server2.example.net/secmod.db b/test/aux-fixed/exim-ca/example.net/server2.example.net/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..4bdbe54ae4ca15dd6f6203ba2acb0f3edefcf2b6 GIT binary patch literal 16384 zcmeI&O-jQ+6u|LkE2RsmZrq6sxX7+h_rXQoNKp#)0x_AE&~#FgRO-TGxc3Gg!*#ua zUcdv0&LkBrg19P0{sWKsdNcF#TSprEfr!*Zwx2}y>`-<@wruA@n#+ORFBj@%Uv5=N zcjorluDRxNT&%q{t9sV{E)ODr00IagfB*srAb&kqfB*srAbZv(3uGm)$er&>ZsFE=V>%cw9R@5Q!|W5QJnc+uCr^M9k=y7m`oGhHoEXssI#J< z>0vzgJx`7G&DSK?;UtaRIoG$ND^CrRV3hl6HjRQpmzR3WNq6O*DxvrNwrVN1_kA9@ zOvl=s>O9QiX%VN!?NtBa-`7ukTl}GoAMLjfetV}OfB*srAb +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQId2/8mqWfInACAggA +MBQGCCqGSIb3DQMHBAgvDNlX6TpnZQSCAWD27NSWhbC88NONthVEEIHARSoUieXl +Hsker9qC52voq+kSQf4sFmifD9SgestoXFoxBOWi4mnO2uwUqu/yC3Igrr0DE0VH +zXapBoEbd7Yr4y5BN7M5+oQPGjxCUocP3Bp9dxvo5T3lFLtmaBvdBucVHvn6UqzX +uUZw3O1LdoMm6PqZXBh8vzhapYq5I5oMOhWJsJrauSfXaBJObeo3MgFF6WfUQlnI +fR/O7uJ00t+ArvdkQVIDT70FWWAFvt9DDtVIUcva8BfiGEjPjqso0tElTzPRqRrs +WmS1jn1Lf/EVaVSOIIecjHodxeA7R/vMlG+5U/PcgfeYMEFyn0Aj/tUvdR6tTAUy +1K5zFEGG5YCY2e0HmVyc/qvOoSPwi7f8eJEziTuv2nXlPrjd74OcGn1ffXyMeDZ6 +gDAQB9pe/7m9OZ9MAxuak4DEyFMdNJTFJ3il0ILAi8R2GOGA+TVSrGAT +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..edb418af1ba33a30d16dfa875c85af843ae69085 GIT binary patch literal 726 zcmXqLV!Fh|$grS^>9j!;({VOVZ8k<$R(1nMMwTX~9YCQi291{&niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw}L5go#CnMd11Jl;=0z z*FE+KTBqHntHy7@%f_kI=F#?@ml5b+24+Ww-uIg{ZRh6bt((5VV^`;vY0CD!Pbypm zSFc?ru;a`9jA(1)u!Tj<+xCiQ9A|3pc>eUemb)%zsh{0@$w?O#1oYSzG%aS zaRU%*EnsG1WMX1uMzhJl7)MA-8%RPzQV0@~pg_#bOIL7CEh;gP6X!(=O5-STUSkUb zSjZYjkrO=zF~}}s1cre(gMkN=Bg01f$FA?K+cS;ozP(M{{lMbO_S5SdZT@S9UNz%< zev?^GElGOu!|99DnCE}Y4`0-INYivna&3HtxY5PKb~lZE?lLhmGB7UIGSD#K1A0i7 zpONuD3kx$7dxL=(h_4Fb^B8ckaX^w9Gbge;AaT+2@wT{{XG)E?*UF#W9lL)WZDo4i yp1U>tgr#xbDZdJ~D^<_!rmIyqoD^L6?Y^?=31gE5jX{f8Uwb`c|6?V3Rs{f31KoE3 literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.ocsp.good.resp b/test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.ocsp.good.resp new file mode 100644 index 0000000000000000000000000000000000000000..dcb27f250fc9ee4ff63bf55fd32df5e98695a9a9 GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0V6RmKaJINPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXOn)EGaF+#l7m&HQYe#{tXAi8(XBvWR?;KF7`a z@_y*|`^y64eja}={^P9|iYDvrl568D#EmW_>Bw-46F?}*;uvtn3<$l8CXOn)EGaF+#l7m&HQYe#{tXAi8(XBvWR?;KF7`a z@_y*|`^y64eja}={!m?Wfl_+WglHy=un!{3f%WT9WkQ zhtn6QG0*>)AHJybkf!OD>xK;ok3<85&@&y*T(ua!T$J9hs%+RF62J$GyP2}|R= qQ+^d}SE`=dO;@XKI4QXB+kIu#6UHVB8iN+GzV>>?{>Mu6tO@{CyWOJz literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.p12 b/test/aux-fixed/exim-ca/example.net/server2.example.net/server2.example.net.p12 new file mode 100644 index 0000000000000000000000000000000000000000..e54fff3477f3e26b5276024181300e05aa93d291 GIT binary patch literal 2386 zcmZvdc{J1y7skIc#@MrOm8~op+t>%mR)mZg*(uXchpeGY!(?V`Ax72_iY!@^Eqje+ zESZv2wumW4_9Z3jtKYlzp7Y*6o_o)8&b|NK&p8hq4+b&8@lZBc%=ws~Tp$)u9$p#` zA+m15@&CsLGsB5s5S$3wgL3?9gOeQu&Le`74$XMDG?e|{_TgC}2#OG@KtQF zn}$^0HZ&3l==$Lsan6BzV?eHYI4VoMiI>b(zMZfA9HOeyTm{osPUC}{ z8(}HMfg&|=uL!mj@$Y6@Ytn8RQ>n)K$wTiVT{IR{I0o*M3SmA05-(@2^3R72ty$YO zpw|MQbw1A1K99fY_{wPbnk!kgN!)sc^i1y9x7cdC;(*ykv4$$8?>4RX>9 zCNy)V7e@yokeNd8#l(!@*A1`5$VpQ=u-C4EPJ`jiuexDcG005)`Fc-*YlcD516fBz z>_vWf_$TKIGVEp*?yP3yXYfvAxpAM$aCK%-1Bm^LZIYEGH#V%<=xnQ9^B&<#FN8-O z2j8(!aG)kTao2{)@sD{uk?w?;j0ye_V+O=#!$@rkOjIETbplLI?c|YXeyME6=Hdd z+4QmVFJo^hv9vjhrQ?qEYKFG4r6D%ZYj3>Xce6EtS%0z)sXRP;BKjM6IJ#^kitU0! zzOfx~5eZo(ISp#_0&2cMyXs&Z%!mq~uLsiqB z)3tbfG3o43WjmLAo=3V~ltiJSe;KAd3lk>jyWO}e9M|!y-mCcPtzwc;V7E)pC(0+; z&r>LJ?j?uk~>O~z|{ zf@yJBT`n$^XCYUmdegHTT{Z^lhKD$Xs~q~w&*gWmZ)MQ@G;PNIy2E9|SV2Kz^kypV(( zmZObI28ueheVVI{tV*(>I$g<#{@`k*!er?}WMLPiT_5OubfwAqI5>iSgwrDaW8KMd z87TAO#zufTtGY=2c6CVTTHI7qTBj(hQaD1FI-V7b$be$(eI)OVq4Dcqb>dP*FK0N$ zpif6_I=d4kT-D|{K8ri(Z{49>QQl5#lze$MH+X}OuH7Jlu+*^|r0?%fW@ponUzh0f zAACT5SYUr946B}Fs2b%MY&9Q{J(`&8++s=quJriS{_OCFBBs9&lD^v$=)#YK>srSx z_`GP33iW@DB$mC;zR)ZBo`!&Ygx3WEdqo~Wd@Ez|y%gqIzi1HY(Xr~NElwYjvx9E* z`$b!(>17s|(iHd5mNVz2CIUM3pTNY@v)|2`>b4-+<4Tej!+Y<#-HOvIu-;fd!ulfTAf;n#b`H_=v%%iUD?asvRn@3O z+r}~Kb=$o#3svfQ7x)CkJ-%RcYi4Fa>}||PHO)n)3Sjt5Ut8UX$rr&`m|`msyK*3z zrB&*cc}MEL@ZB1Ia|R0+Upl2Cm&=&@y7$u#n=*DN)eh@UU06lnHB+F!b zDMy;Q-YDHUf{AL2aVHWqv(31RWrEzaWwB|XQ*CInyZmT??$Fs9p3agUsdCCpZDryJ z1#W~+9~3YD?4SAc3{KfGD|$-0cf))E4@Hq~kWcg@d{*S+ZZ68_niUu{A)&dX5g=F8 z&QFe(8S1aeBifu((rIOnp^~tBtp>#EXV|iVJcyf6L$IDbn^0~(5*X3;g{jRl*Uwn{xYx-zT?R}ose9*@1$crx44f`)!K zJ~VKyLi2sT-lg!^_Q>)`)gS}vSsbzT$HQC*>o9wYLX>lu zrdwUnlpk+`gYCEPTmj)@C6VtIP6^@D0-E)*o=r_0Nkx8SUJdiU-q~M7T&6+GlmYCzeuomN!K7 zJjQy|$JVR!81I;QiT2mi`$efJ)rN#u_G+)I)-s?wG>7_0uX|2aUt{06SJPZBk;iPZ zti&6x35R7kTvL0etXWs$tz9869?IHFpxi8P%AxpjDEB23UCFLQxxISXK6OEwOXzEa zY;;7#-u|DOTV0m(^Yz6~`-T^7`Pqo>i0pfI`I7G*n)B8xVr6Veuz$g+?D5_$O){~1 zUvcS!+4+afUj|E>hPJ-nF#j=!t_khsb#kpNP?HA=HEqJ_R0i(J=N9nW#~$fcokJ6{ z#vXHvQ{l_Xfkgug`)=*9tc@!}p;#srobrG}DfKpVTS0Yt>be!A9udun*F;O};*q+& zLv1_S_a9hR(L7O7ch9Dl^;SXbxlf|nqrNilxp>d=6MuafI(Dw|*QZ{%`<>0EYwg(X zrZ?06m!`T1^`tKUCG)7_0j=>&cQV~2+~Rk0*z7gy%tCXU(P?Zmu2y9M{s#dB5I_I{ z1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009IL zKmY**5I_I{1Q0*~0R#}3RRR~o_no3x1@Dup`7ea;wSQ#B^GJCAXZZf|!{V2W+<(0D z)1%jWvZq4nzB4167QT1y&Ld67oPnNdW5v;tqFwD18_q84K6&u2zz@S#^IYxzhN8jL z`5(V}V)vTyijN-IW9B0F74o(jBKF$9V))bR5UBY4^T*%K9;z(6z3udipS6h(w~vkf zHd_76{%@E5S@!DNg9jVG$bKI@AnWHn9MIp`dgz-m@Ah&1>oXl61grW_57eLa&0GvY z%codFuJ(ghh-p!LyW~SYX?*>PDk0d#AC_LxosMa%JwNLzZm?hk5I_I{1Q0*~0R#|0 z009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{ T1Q0*~0R#|0009L4e*%94S4A!m literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/BLANK/key3.db b/test/aux-fixed/exim-ca/example.org/BLANK/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..f4cc9de79f233f640805ba3ddc5708e8a25dbd08 GIT binary patch literal 16384 zcmeI$y-EW?5Ww*{Pmh2nYY|IZi@;Tu79xn~1889(tVuNDk&~Q3MeQ_|*ocZBSM>i8J-c{Jbaiy(~lk0R#|0009ILKmY**5I~??1RVKLZS|%u z)ww!V`zF5#1Q0*~0R#|0009ILKmY**5J*R0%-Njy>}c;Us_z}0Jr!o6$@a1zENb5i zwZCp>t@)SR>dD3M!}E20_TcfpHF`L;CH=YDbS)aN+&;^$Zs*=#$8VNK8l~*cf_t^5 z!*C<06uf+?m|wN$ij{CBD0j<01@A-v0R#|0009ILKmY**5I_KdzYBEI`Ojbr0tg_0 U00IagfB*srAbheKHxpH#^{TIy+@{C$ zVQzC}lzYmy_Gr5Mto>XLL;wK<5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 zU{eHY^0qr`y|!kpO}P>GKmY**5I_I{1Q0*~0R#|0;O_zrQ8Hh7AMV>Cv28AS& +-----BEGIN PRIVATE KEY----- +MIIBVQIBADANBgkqhkiG9w0BAQEFAASCAT8wggE7AgEAAkEAl1EzD7A3887Wit6D +uE5WOuTdCD4RVQFBa85RFHZd/Q3Yiw5SXh7gQaykL/4mrFHzgbKNgj6WmjBp4tNI +FQYqJQIDAQABAkBNigd/X46cef5IdRPMayAW19ZH9f5Nr/IFO1kjAjDRjfASDkBN +V/rMV+78Rh5fOAj1S74VILvKTaaLWhvkDOF1AiEAxxhzyV1rOrdo/tp7W6uD5m0g +OTxUZYn/6Ec/Kkb6SjsCIQDCkN8rSD+IkhJ3zQOvCi2Onxjon5mE4mkbhZLq84W3 +HwIhAJbbRlCbwnY5JwuEjNgG++iLY1E7D0/o4skjww7LvTalAiBCCbH1mtwVmp6y +Et/BNY8o7U8jBaixtbc/JCMto+IquQIhAI6flaLC9nQbBh6BX6GVeGu3XS9M/jFe +EK9fMWn71opJ +-----END PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.org/CA/OCSP.p12 b/test/aux-fixed/exim-ca/example.org/CA/OCSP.p12 new file mode 100644 index 0000000000000000000000000000000000000000..e247406e26ceb38d6f1942c0dfdaabc6eba5642d GIT binary patch literal 2218 zcmZvdc{CIZ7sh9XvD07-^2*4*kCJ%pG+7#3maG|BvSi5`q9MfC6_v3}n8+4m$?~Ey z2xBY>jR+0drlclodiAY+=Y02^d;fUOz4xErbIyanfPhR03=6w_vPtqbH;@&G$4FwB z6WGiVnExXK8Hfbnm!qb$aQ^FpivtM4Cjc{#L@Yv*h2!7y(OVcZB>pXqVIJ8%G$l{x zjW;P30)bdZnG=9$jPn>tC;?h?pc6LRU8i*2kivhPvGvp?-=MZs6KeZ*a=5k#_EFgq zt{$o;mJL;dIZN!sua}3@A!vfB#^z1_XmPhNrY`Hg8R2hll{3J969&34k6TMnS`FRkng z#Y{jH-+Y7kqyFrWVH!E~u#N>zj$VINHP}~ns=C_8yQcLaGk{mu!_#Zok|Ion#bJ1D6*(L}yMdPius!2d=B4 z5K{kv$_`Z(IspS%0*nAQ04o6eX!-)K0s;YEfDnYlf7b+5Va(9fo7yB@^p7fIUk+Xo z!GTWyaq0=cKk9csu;7pE0RjSk*MR?npXC?+JbL?RS5XJjEXp}-*)>}17k>Pay};8h zXho&{L!Z%Uef5f@pb@`<(=1{{h8`ut@}e5?4YfMLU@-|gLK3c-_Le=~LBO(A>9u9{ zuC(mI@P$-EZDR%Bx%-@WOug{6N0F{>U4FL=XATcTIYXi)D+92NlKtH@nLlL*aiW!e zlMy;3OYnD8;lSCw2P)n{pZMX`sRcfMn}g*uL%U{oeFL)!N)62ir7s#@c~Ktt)r%u} zGDT%21Vvf*%9CuCwNG4n=qVoVr?-h!L>P<>OaBGX)XC)wS4`Kr>$k+?$3F9hdDq!W zfWBpz1TJSrO5Z!tG@;~j3hUm9qGbTl+;CFQY)QvxW@X;!#fk@9iN`m!_E4e3X;=4m z4}hS>1IN_Tzi5{xmd_|3iWJ^X{CO+*&`4L3pzP!-Th~xi4S`&;^x&GRytpDzcr3#& zQSf&8tt-*IewrB>t^M~STVkd-%6M0Xa*`b&F^>T<$}aj4%jgV`0P<&WMS3PrpY_U< zA&E6nb31qp+6GOIHdt+*8Wg|kLEMr1dhPO!hGFj|#jN*&wVyX**B$MT&E4UK_9qkL zq_iR0RB)vebiLAC&-h-C&zsIV*FniK(3umDXlG4vk>vAI2LydAqiB-^is+8F6QhkV z23Fa+u>%l1()GN`)z+y9<)zMagXg_8RmwHs2fjd(jEdHp36r=`c3EX>ta5ux*Ok+H zK{YP1cWmX3?Z*T*vO+5;XFV+XD8kD{oeJG;EqyR`zY2kwq7kFdG=C<9S?f2)=07b? zDrXTvRUMNCZ7Iupa|G1k`Cj9=Efrf6mHK-XhM%;OnD|TD;OM2Nl$)a`>85tk zsWR^#{JUO_BW6nM-+z z#~>ZU{mg5gtJCbl1p!Hmp-PcAumY#c?+bl*zHVV0BNsGYdu5$|<_ys4#P6!h6+ zC4#`u?sGUCttR*&wXMra>p`@~8F|jKg!Y>WxjWi3yVm>}l~P+i&J|Oec5?*hBw1m{ zsNtV($lQP;X{m?j-Q!Z!$AwVVan!qS+!nQE^PgGetXc;YeAW+je!jWUA=s% ztR8q<75KvDm^&Pz+p6eY{Aca^I!?lJ=NwmqTSCJW;@w^va}vfVxz(|&=Jo?5dOpD6 zMeY|dE1YZQ?DVx6UbUSGI5N$4Ekty016yRL;W32gEJ+2#oAGl`)Jcc~!prg`cuu`T z!Wj0Lh8f%~5@n=J*T>J_zp=;yiZWGv?DbZ);~dy}IzzVcHWyrLNnM9NsL<%%@>yOh zmr0ooefVg@b3jpAsSC%&dv&)nYhQxh6GobK%!(zsB-AYy2u2y`Q#(w?0pbl~@|$QV zGIp{*^%4PRTUN9_r$_$cvhnkn$k)#ka$}49MXR-7+w%K}iXIK&i)-(^E$kPj@t(cc zSckLlXe?cW(X*sWzwm>Y3K7s1?NN0tBY&k$W?Oh|s{`kBuIj+HnnkmeGG9D&OeE%? z^$`zGZ63LCm~$anwl`yC-_}wP-iXzig*ElHWEy@t+-=biIdcbzbDUj>(ECPY1o@8uX?Y4hQ{v` zp@|Sju(N;_c$h%P!2o7xd6p0_H$$9|F~}MH`~_1MpisYs8A1%(#3=D|qRCCZ?#1Pe K=D$J%0Qehu90gVY literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/CA/OCSP.pem b/test/aux-fixed/exim-ca/example.org/CA/OCSP.pem new file mode 100644 index 000000000..287e61e12 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/CA/OCSP.pem @@ -0,0 +1,11 @@ +-----BEGIN CERTIFICATE----- +MIIBgDCCASqgAwIBAgIBAzANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwMloXDTM4MDEwMTEyMzQwMlowMjEUMBIGA1UEChMLZXhhbXBsZS5vcmcxGjAY +BgNVBAMTEWNsaWNhIE9DU1AgU2lnbmVyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJB +AJdRMw+wN/PO1oreg7hOVjrk3Qg+EVUBQWvOURR2Xf0N2IsOUl4e4EGspC/+JqxR +84GyjYI+lpowaeLTSBUGKiUCAwEAAaMqMCgwDgYDVR0PAQH/BAQDAgeAMBYGA1Ud +JQEB/wQMMAoGCCsGAQUFBwMJMA0GCSqGSIb3DQEBBQUAA0EAZe2NAm2FGEJuLkyZ +AiGPi2pdu5ngE+vQhyTFR3EJ4L6HDkNGE5Mv7lrsSSWU47N3R+Oo+glEau6SyTb1 +zMIYxQ== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.org/CA/Signer.pem b/test/aux-fixed/exim-ca/example.org/CA/Signer.pem new file mode 100644 index 000000000..bbcf3ac09 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/CA/Signer.pem @@ -0,0 +1,11 @@ +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAyWhcNMzgw +MTAxMTIzNDAyWjAzMRQwEgYDVQQKEwtleGFtcGxlLm9yZzEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJ2Y6E5WBXQE +zFsWgxK4JXrpPWGEQZ+KNy3iXgmupAA6Yy0umCLu+eGCekkwZ0WfFhhd+Qy7P+qo +F0mre7VDDHECAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm9yZy9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EATmemAFFWLNA8natXhFyhrDYmTv8X +PEJ3UVt0DmOMxmEBahIeDfplfTfj/NYvy/on7YCZO7F5PwVY2pNJqm8Tmw== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.org/CA/ca.conf b/test/aux-fixed/exim-ca/example.org/CA/ca.conf new file mode 100644 index 000000000..9d6d2ed78 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/CA/ca.conf @@ -0,0 +1,18 @@ +; Config::Simple 4.59 +; Thu Nov 1 12:34:02 2012 + +[CLICA] +crl_url=http://crl.example.org/latest.crl +crl_signer=Signing Cert +level=1 +signer=Signing Cert +ocsp_signer=OCSP Signer +ocsp_url=http://oscp/example.org/ + +[CA] +org=example.org +subject=clica CA +name=Certificate Authority +bits=512 + + diff --git a/test/aux-fixed/exim-ca/example.org/CA/cert8.db b/test/aux-fixed/exim-ca/example.org/CA/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..7f25f8d49d2e9d71e23a8eed8c6abf35b93de77e GIT binary patch literal 65536 zcmeI*3se(V8VB$@lYn3Wfe0c3QV~#4aueh!4=GYXUC^S|MYK|gh#(-wCy3$$SE==^ zJVdPzR1}M1eYA>}Vzp=y7bz;oSLy>>D;BM~icqOLAy^X#OU-e+>)C%ebCL|n%$?u; zzMGkxbH5O6lL$fxO9;Q3kRjYdVn7JP-N_fC)B1q>f6EG9%YDngh^72-cKm``?p}VA zzec|N={Frkd;awOVuuib00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_ z009U<00Izz00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_0D;#fU`-l) z|LH69-Q%0)EB4j$9pbI)9XHrzuz^RT`+4{M?qTjW?u{>pG+drZ?y_ zjFuLm&Z6$rSerMN-&OFIWNyUt#5jplLQ=G-7wsuu%M%z!#>GTNSck?$$H&A+Tl-6r zq-Nd3ROC!WVmFbCc#yMO7#&Evv&@wC>rGgeoNm8bwGBK!GB&pF)(_9HvQebz&f!Hz z!%oDqk>B+iTk&+N-GlEPjRveAA0^@qpBq(~X>q7rmc8g?Xct3CRDqUZe$b_*-~DLB z*XTHOxZmbuhzTK*xrs4Jk|?p0k^muY+>C(=jW*1qy+xL^mjbZ6x~oQ|juc|uVZ6luZ`xo=7BL$~2s)|Z(8pmc%doOqO&K?uC z9TXny6Q2JM*^2Vyher!8?J{9`3}LpV9iwR_)POUx?8Y$9`FtMB|Aku1pWDixo6_#u zI*!_0kapoQzdvHBSpJIMd`H@!+HbMlVw3*%RH-!4Qz(o~ic{`CVO)e%GE?frt)_!s zyq{tC{iq%7`{Fre(#=}mo-i{qQK;1aLfTutCnLTYHC?Q>50!biRN}&zezG$PUwGYPg0%z$rT^g73^}I(|jxY`nL4oH8m%@tzExqSpOUR03(0H`&H$| zbi3yVmljv5ixe(GH48!=?w2LsR_Wy=$?SyKHet@HTS*j|(VdW)lBC&^BsGaqu3=(W zi7co&2g{8t0yP_dnHOD1cP=k@Twd&Xkr(A{#5HPyn!Ip!r!UilcGAKQ)8fK`iBI?0 z)CZ)zYnNBFuwi6Lw43(dzS`xWGr__)XOpaI-tNu9Sr09$1qYUwx>jaCus1cYANcf~ z`-9XjW6m72`fF=il+v^>|EJT!N|6>lsL5h=J=ms?xU6``!{V^cJw56lXIw)=zZ_cC z-y@@JQp%$G=?Y8#3~fU^QXF zC52`I*gh#*b55i@cChMJl9#cm(=ulBx!5dH#3mEn=CEH^XmTU?zaO$y+TCGn-WYWM z?k33z`^K!VjMm&dRnRbbU6R|KOE!k3&+aZOIN@q1$fuT$$=wGA_e5Wl*$d z`g zPKYZZQ#9JH>gkBOjmy)*TFuC((gIeIh$`!pl0v&>z-GCm*xi~GlK((bh`I9^rSV!E z)>*4N%!#r-Yrjb>vb>t+aCOqxKe7Gi=S1c1ihi<|-7s_lujkSF6%kgqd1r0opA_fR zOLLkld8Kn~Plzh=Kh?UJZ`ALLEc7WcPg!_7d-Dld)7j{qjmCD}<}a(+E(&G!vLklfvD^B2W4{0TZ2M8_!i14% z6uI1x%O4{DW0n#~@cSl(v7>VxOG#H0I{HKoe~TTSde<(0;1t2VE9XQ~76d%W1P7?fT;6mZ#fBi0fNP z{VI0)GP8H$okp%>-(H3xLKLfVG@R?5xM+h^kPe&77~4~KX-D==+-`E+q9VW?||Qkc2n@{ zDER&TI_*hKM&u5=a%1jK!Q-@~{4*0wmlz+moqxwWVyWNem2LxXPSP#fPCO$AI_37c z*LY*`{2&?~u-VjXVx!(s-@1YxL50bm`|Hh6bY&PFuiBN2cFV=Mr9gfKq(im2JC-3D zUGud2qzjJTK}L@oQ029;@cpIXdAnWhf}i*BdS}k)2~vZ|k4{D~(~Pb3nX=Y49JTWKdeEoe~e17#V^Iqtk zwNslcasUCJ7Mjk)AA9P>g8trP}`qZV`C6`-XR|NuW2Lcd) z00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_009U<00Izz00bZa0SG_< z0uX=z1Rwwb2tWV=5P-n{i$I4(0aWTO23JEyZ5@r48ZxIfnkK1s(zeRJ zU)Cc~Q$yx-+nJOaO@C}(Lq=)twR2df)kQj-KUsY~tF-LY@VvFdZv<>S6-}55 zJN8hrH+jV0d3zJoXWr+FJS(2A)gHgp+|{Jd#GKn#j<5PA z%SYGomp}{Y$(6Yy8}8?A|FC9i7h%W>b$j8;WoQ5R@W#z(A>e}65MjcFzx*Yt) zz~btRU*>7+Mg8h*Z*G&js?KI$!xcfvPk|o|`0W^7$t%punlYEIJm0G>M|ON)&xjhI zIy0$kVN!_En^@vQEl|6O&&wlw4n1-#MmH{>tSO}_Jqwq7Z1Ks3Oy}n1OK)$qG)g%x z%ZMIXwAx|vwGAT^n|}x&o?^RindN}+uWuW^8$WVXyt=&*Mzc~JZ3-)?MxQ(@G^>-q z>#PcfV!wKXC{N&*?@zNi{5+~bT?Bbz4$|a}ta76jN1{)N%6xSB9P(G0lCIfd%a6cC zqr7KTTH8_rfs7~Pnd!uoD}NBfErQk(2<G#Q(X_u=XR68!uyXNxPD*v;B zy@BT%e{kAOecqaE$=j7&EW50q*1)^;XzCFshur&He4ZGqpWe@vMf~G5%}Ui3@el$K zfB*y_009U<00Izz00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOHafKmY;|fB*y_009U< n00Izz00bZa0SG_<0uX=z1Rwwb2tWV=5P$##AOL~?j=;YF^`O_# literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/CA/crl.empty b/test/aux-fixed/exim-ca/example.org/CA/crl.empty new file mode 100644 index 0000000000000000000000000000000000000000..f35edb0c128955a8aab28fdeacf17a592c01be6a GIT binary patch literal 175 zcmXqLTw@Ty#K>sC%f_kI=F#?@mywZ`mBGN+P{crpjX9KsOPD*gA~ClhCsi-MDBV!n zKoTU%EG(3qlbM{T5S*EwmzkHY;G9}iBEfHDU}$V$Xk>0^YGh(;5`|_cvm=9kajog* zZ#|mcY+bavg-e(_wIVUMASYEXzbM^M z+CUN{$}B9DoRgWHs1Tf)o|l=IuHc+nR3gD|WMF7)U}$7+Xli6)Y#wExYaqhJn1(4X z%EZKQ3R4)>4a|-Vq1h^nlFl&Q4Pf~7a!14NsKePz$rq(VPyfhJ`*=@VP-j*|iXpRC gMasF!GTTqyo!W3Lm|Y+>Wd*CiQqP+$7oQ0N0JbMU82|tP literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/CA/crl.v2.in.txt b/test/aux-fixed/exim-ca/example.org/CA/crl.v2.in.txt new file mode 100644 index 000000000..434045ffe --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/CA/crl.v2.in.txt @@ -0,0 +1,3 @@ +update=20130127152437Z +addcert 102 20130127152437Z +addcert 202 20130127152437Z diff --git a/test/aux-fixed/exim-ca/example.org/CA/crl.v2.pem b/test/aux-fixed/exim-ca/example.org/CA/crl.v2.pem new file mode 100644 index 000000000..bff595325 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/CA/crl.v2.pem @@ -0,0 +1,7 @@ +-----BEGIN X509 CRL----- +MIHcMIGHAgEBMA0GCSqGSIb3DQEBBQUAMDMxFDASBgNVBAoTC2V4YW1wbGUub3Jn +MRswGQYDVQQDExJjbGljYSBTaWduaW5nIENlcnQYDzIwMTMwMTI3MTUyNDM3WjAt +MBQCAWYYDzIwMTMwMTI3MTUyNDM3WjAVAgIAyhgPMjAxMzAxMjcxNTI0MzdaMA0G +CSqGSIb3DQEBBQUAA0EAVWskomLMAt1QAPrpuIC7WsNrAmPRG1XL+Ggm8d4rESya +WGQxA0p4ZM6THLfJ3ZWAxlMHEGVkqAUQpUnZhNHmEQ== +-----END X509 CRL----- diff --git a/test/aux-fixed/exim-ca/example.org/CA/index.revoked.txt b/test/aux-fixed/exim-ca/example.org/CA/index.revoked.txt new file mode 100644 index 000000000..8c67708d8 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/CA/index.revoked.txt @@ -0,0 +1,6 @@ +R 130110200751Z 100201142709Z,superseded 65 unknown CN=server1.example.org +R 130110200751Z 100201142709Z,superseded 66 unknown CN=revoked1.example.org +R 130110200751Z 100201142709Z,superseded 67 unknown CN=expired1.example.org +R 130110200751Z 100201142709Z,superseded c9 unknown CN=server2.example.org +R 130110200751Z 100201142709Z,superseded ca unknown CN=revoked2.example.org +R 130110200751Z 100201142709Z,superseded cb unknown CN=expired2.example.org diff --git a/test/aux-fixed/exim-ca/example.org/CA/index.valid.txt b/test/aux-fixed/exim-ca/example.org/CA/index.valid.txt new file mode 100644 index 000000000..c8fd76ee8 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/CA/index.valid.txt @@ -0,0 +1,6 @@ +V 130110200751Z 65 unknown CN=server1.example.org +V 130110200751Z 66 unknown CN=revoked1.example.org +V 130110200751Z 67 unknown CN=expired1.example.org +V 130110200751Z c9 unknown CN=server2.example.org +V 130110200751Z ca unknown CN=revoked2.example.org +V 130110200751Z cb unknown CN=expired2.example.org diff --git a/test/aux-fixed/exim-ca/example.org/CA/key3.db b/test/aux-fixed/exim-ca/example.org/CA/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..e11319ff8ebfb35c1dea32bfaea97802f067e213 GIT binary patch literal 16384 zcmeI%bx>5@{|E40Kw@bG1eQ`jx&-O&MpC3xLZlX4I+c{}1_|j-Y1WlaWkDLGyBqoW zJYWC#{qY_De7^I{?3uZ9&fI%v&Y9PHK6CFq7l2M;1^@t1006Xc0D$1v5P$;!0DpCV z9RSSVgJ0MGK7smo|M#W8?gIc59ejTL>i=qg-SgM+k2lQ!tmhw}7datP04abJKnfrQ zkOD{nqySO?DS#9}3LpjkEdoS<-h?6&zr-?c9hgo#)%DLjGH_Fk<^)&aGY-tNQ<4Q@eDn<`W!e;C-mT&A_ zHw%Ie_1K}jC;SP^?d_LLI{E<4<3UG?dOixZ(2cHgj4KIXIgiBn2bK@f1nL(ZOwT_Q zPTn=XL@k81B@&P!9E)`2Fwt7976%RHLbdb~v>I?NXUnVVrF(m^D5~w zR}?_rMugnf&@`QkNf*4NnXVRX4%~)ws^40elxfdI6E@JAO@)|jk_~+84Gie4+j^U^ zsLrUfeR)T-ph^{!Xn`=M8FeaOs|4}l+WE^Lc~nYM5|;q^6mK|#Li6s+VsR>y#KY~b3IE6|7lbYw)m?}wPQ0=()wiSS_ zRE4+`m%cX?Kt3)fce-p3$L;Hq0gr6hl6 z>hcFa)Dj`{?r~Hr{`-U+UV~(ura5Y{LWR{ ztohMH+lyH+4JgHvvgSrT%Cb4#jwr|P*M@ZP4JRHll2YulUwjof^u^E~?4*A2JJsO- zQmZO*3feE)+9`;*#7AgM_kbf}?jHY1Rqyn1{{g*(*A;{?87!oi7_4?){U<#4vpqgH0uEcx7!4LXtW!#DKHXX--+G+OF=-5VD6sb9eOB8s=R zBPdkoZ*^k87qN{>M?O2)6;$2%C+fS1>&IV*fSExmncq#gE3>qo_zOMA-ZM;1F{CoA z8D8w9h4BT|`C3k^HLy32M;v&d<5*tvFjCN^L~hZspU>QH+faDV_Op{K9JMqz!P%WF z{2O>HX|B7P+zcVMMdmu^=b}#dhZ@x=d5HM{&AwbHpbDW#E1dDjsaxiEjUFw(?#Flas{aGRqO6nymp%p<8hub^|DA!MMaV?EDL`8hvY$ zo$&kh%zQ?kNDtqUpxE52OLMP*{0M@TFr@*csd1bnoNFqYpw?Z}WN6DX^DyU`ySZ0m8Hc*&7 zlPpt;tFMuO<8QEg<-X$)aU}{r(Akab}!4_imcnc z?rcq5fuk`x){?k(vDD#nhQ!kbggGu53a|Sk-}`e`#uW#ZtF2$1HLl-=8sSk36TWF^ zY%jSjWatV8rrn2pahD}>^>E1+6`YaITvPGA;%N61)4~(*y zv3*Xj)XA$1)S;O{Ubx%bhmNB$POPsmeFoYq)uSlUC*Nq-pXYtQSkd6xy!)a(<5C+@ zsa>C`nHk{jEAS;*g9pEg|9BV?J|EPirYp2Ehbcy=1C)F(7=oWV>0#DPJdQq}0 zpY!MAGL7San#e%0q%NcA#y@M{43iw4rgWdU^rg0(vNjO}--SB$vZ zCVS+^j>UNi_B}blYAxovN%)rhzaEp5VlHjdxDjyW7JlnWGzymk#0kfVcnL|lDt4~) zWG!%DQ>z`1jnF8kvh?#arj^_T4wVD7p(UfIEEXl3xq1)?4OT7cb&NNS!stkp-axk{ z!+_X?_O9l=YeopOR_@$ju}ts5qKP0vI5)-}{MuQ3b;qJU+EmZ?#iPlb?1uGzUauR* zfu87KjFezp`I61l3D*c~hc>Hz4>?mKGLlB|EXwUj_|I*D>}E}=Sh!;=aFP&3SXW_j zL7QXkD6@b_1dJN$95SzC1JXGlPrmHfM2T@<8zrH;4)(XsFBAgjnzKg8?2c%h^HlV8 z*$*(?$mLP1gA5u1Uf{7Bf$|?R#dHuF$ycv+(5se~N-vJjmD~ZQy;=Ha z<-u3@{p%M#>yP-4w!e~JSlc_Ao7uBN%<`vAz3<7~Vx>&MX*jQP-Le;f$f!I1apaVMbS@5=SwQ-1X zd_ndgU(mm0=K{G-qySO?DS#9}3LpiL0!V>>pTHkJULfBY4b=BpbljY2x^m4&4ng*U zB)>mi2H#gG7^q{iHuuujQ`9i!O3fYlhKK5dBc#0<*FWjHy@VxJiY@drI;CzY8rD^J zkDd5=SUiOSvesXIYnm?#EMbLd_?wf) zU~tYnX<>FFdD98)%Mv|V(p8r_4Nwn>BfdLTk{}NKbWn)ZWwRxvkqW1$Xg_=ykes^Y zliGEr`(h&61C zVz|o{L&r12RtW&BGMi`F*QCb(;vp`o^6~7cSi35p{Xr#l-_ys~1tW5=l1$!PmMdq} zkvPR41V58)ax}5)ST>&Wb?`7qXbWL4><9E)1%w1p@wr8Z+bH~l2;Fz2U#l{BHXv+GP_QuaeZ zi!-BE`cE4Tpjmy@!u+J0Le*0YMduT(hdDBazf&z6)HKm6C!^Y zQFvZU`5l`GZ_#M&f_E~t*dZySo9xX)q1pIV_oCCrboAll=Y&@(AV8>vXe3{sA84pC zEUYAuil3(!>?Vo2(RE6v1T>r zEp);uS~tyI51y^XMtky<;g(VF)jH|Og}lR7XI1!Kf#I^p$tKj)norenDlHM0R1<&A z#%(0^gX9QjmpuU$QYm}jvPFt59v9UQhx%uSEOVxDh#YikRm1I!=?GXs#f3RydshKr zBR{yQo}&$VOj@uqWa?kwk`wF$`Mlg8uS_=hhrb`>!$N5;Cr_KDKR;9w$7>U$4m*>jDJ^2!N7er)O z=6|PpGT4>f{-w8~N=R~*_a->g)pFzg7fZ=xG0BX9X}zOwe$kOmb@O~5`6t3nd`t+d zuzXMJ#dXxp4^m_xn~rcXEcUP{SSl&~lQ%D8*3JA#iY$fo*WgoI8g$-@oqXh$S_4tX zg1%FN^}8ao2j1>V>2Zu_`i7Bs*go|!jQJ?$k`IKg$d@vpGB61{jazpH=IY8U6T$$2 zODSsmFh=Ud6muptllTITRy!|d2#-g2TcbqRB#ZzCQpNiK>vXUH8@y_oJjcJuNStng3)1aCrBij;hp%&1^5OOd2C zW&ik%t@EqW_19?&el_Tko5NAl9Ev%8ICg{nLM*#JUikI35~rB7izfu|sJ>nT%*#Da z$Kc~pC|#X;RFC2S8kG;Ls6g*1VYK1h%QHU6cBLTIT9d092&gShSY&^@KJ_ME`TTK* sWuo})KlL{cIS*0*DS#9}3LpiL0!RU*08#)cfD}LqAO(;D|1*LA12U|3fB*mh literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/CA/noise.file b/test/aux-fixed/exim-ca/example.org/CA/noise.file new file mode 100644 index 000000000..864164815 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/CA/noise.file @@ -0,0 +1,342 @@ +processor : 0 +vendor_id : GenuineIntel +cpu family : 6 +model : 26 +model name : Intel(R) Xeon(R) CPU E5520 @ 2.27GHz +stepping : 5 +cpu MHz : 2260.628 +cache size : 8192 KB +fpu : yes +fpu_exception : yes +cpuid level : 11 +wp : yes +flags : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat pse36 clflush dts mmx fxsr sse sse2 ss syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts xtopology tsc_reliable nonstop_tsc aperfmperf unfair_spinlock pni ssse3 cx16 sse4_1 sse4_2 x2apic popcnt hypervisor lahf_lm ida dts +bogomips : 4521.25 +clflush size : 64 +cache_alignment : 64 +address sizes : 40 bits physical, 48 bits virtual +power management: + +processor : 1 +vendor_id : GenuineIntel +cpu family : 6 +model : 26 +model name : Intel(R) Xeon(R) CPU E5520 @ 2.27GHz +stepping : 5 +cpu MHz : 2260.628 +cache size : 8192 KB +fpu : yes +fpu_exception : yes +cpuid level : 11 +wp : yes +flags : fpu vme de pse tsc msr pae mce cx8 apic mtrr pge mca cmov pat pse36 clflush dts mmx fxsr sse sse2 ss syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts xtopology tsc_reliable nonstop_tsc aperfmperf unfair_spinlock pni ssse3 cx16 sse4_1 sse4_2 x2apic popcnt hypervisor lahf_lm ida dts +bogomips : 4521.25 +clflush size : 64 +cache_alignment : 64 +address sizes : 40 bits physical, 48 bits virtual +power management: + + CPU0 CPU1 + 0: 2481 0 IO-APIC-edge timer + 1: 21441 346 IO-APIC-edge i8042 + 3: 1 0 IO-APIC-edge + 4: 1 0 IO-APIC-edge + 7: 0 0 IO-APIC-edge parport0 + 8: 1 0 IO-APIC-edge rtc0 + 9: 0 0 IO-APIC-fasteoi acpi + 12: 78986 1718 IO-APIC-edge i8042 + 14: 0 0 IO-APIC-edge ata_piix + 15: 2423330 1435 IO-APIC-edge ata_piix + 16: 1025 0 IO-APIC-fasteoi Ensoniq AudioPCI + 17: 239850 2559 IO-APIC-fasteoi ehci_hcd:usb1, ioc0 + 18: 246 0 IO-APIC-fasteoi uhci_hcd:usb2 + 19: 1868741 51479 IO-APIC-fasteoi eth0 + 24: 0 0 PCI-MSI-edge pciehp + 25: 0 0 PCI-MSI-edge pciehp + 26: 0 0 PCI-MSI-edge pciehp + 27: 0 0 PCI-MSI-edge pciehp + 28: 0 0 PCI-MSI-edge pciehp + 29: 0 0 PCI-MSI-edge pciehp + 30: 0 0 PCI-MSI-edge pciehp + 31: 0 0 PCI-MSI-edge pciehp + 32: 0 0 PCI-MSI-edge pciehp + 33: 0 0 PCI-MSI-edge pciehp + 34: 0 0 PCI-MSI-edge pciehp + 35: 0 0 PCI-MSI-edge pciehp + 36: 0 0 PCI-MSI-edge pciehp + 37: 0 0 PCI-MSI-edge pciehp + 38: 0 0 PCI-MSI-edge pciehp + 39: 0 0 PCI-MSI-edge pciehp + 40: 0 0 PCI-MSI-edge pciehp + 41: 0 0 PCI-MSI-edge pciehp + 42: 0 0 PCI-MSI-edge pciehp + 43: 0 0 PCI-MSI-edge pciehp + 44: 0 0 PCI-MSI-edge pciehp + 45: 0 0 PCI-MSI-edge pciehp + 46: 0 0 PCI-MSI-edge pciehp + 47: 0 0 PCI-MSI-edge pciehp + 48: 0 0 PCI-MSI-edge pciehp + 49: 0 0 PCI-MSI-edge pciehp + 50: 0 0 PCI-MSI-edge pciehp + 51: 0 0 PCI-MSI-edge pciehp + 52: 0 0 PCI-MSI-edge pciehp + 53: 0 0 PCI-MSI-edge pciehp + 54: 0 0 PCI-MSI-edge pciehp + 55: 0 0 PCI-MSI-edge pciehp + 56: 1 0 PCI-MSI-edge vmci + 57: 0 0 PCI-MSI-edge vmci +NMI: 0 0 Non-maskable interrupts +LOC: 12398298 14241637 Local timer interrupts +SPU: 0 0 Spurious interrupts +PMI: 0 0 Performance monitoring interrupts +IWI: 0 0 IRQ work interrupts +RES: 282673 309097 Rescheduling interrupts +CAL: 1955 163548 Function call interrupts +TLB: 17977 15562 TLB shootdowns +TRM: 0 0 Thermal event interrupts +THR: 0 0 Threshold APIC interrupts +MCE: 0 0 Machine check exceptions +MCP: 2310 2310 Machine check polls +ERR: 0 +MIS: 0 +MemTotal: 1914844 kB +MemFree: 134216 kB +Buffers: 142048 kB +Cached: 952796 kB +SwapCached: 108 kB +Active: 981384 kB +Inactive: 540556 kB +Active(anon): 287092 kB +Inactive(anon): 143480 kB +Active(file): 694292 kB +Inactive(file): 397076 kB +Unevictable: 0 kB +Mlocked: 0 kB +SwapTotal: 4194296 kB +SwapFree: 4193560 kB +Dirty: 1732 kB +Writeback: 0 kB +AnonPages: 427116 kB +Mapped: 70924 kB +Shmem: 3400 kB +Slab: 190944 kB +SReclaimable: 125404 kB +SUnreclaim: 65540 kB +KernelStack: 2312 kB +PageTables: 23536 kB +NFS_Unstable: 0 kB +Bounce: 0 kB +WritebackTmp: 0 kB +CommitLimit: 5151716 kB +Committed_AS: 973184 kB +VmallocTotal: 34359738367 kB +VmallocUsed: 280772 kB +VmallocChunk: 34359441168 kB +HardwareCorrupted: 0 kB +AnonHugePages: 249856 kB +HugePages_Total: 0 +HugePages_Free: 0 +HugePages_Rsvd: 0 +HugePages_Surp: 0 +Hugepagesize: 2048 kB +DirectMap4k: 8192 kB +DirectMap2M: 2088960 kB +slabinfo - version: 2.1 +# name : tunables : slabdata +bridge_fdb_cache 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +fuse_request 0 0 632 6 1 : tunables 54 27 8 : slabdata 0 0 0 +fuse_inode 0 0 768 5 1 : tunables 54 27 8 : slabdata 0 0 0 +rpc_buffers 8 8 2048 2 1 : tunables 24 12 8 : slabdata 4 4 0 +rpc_tasks 8 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +rpc_inode_cache 8 8 832 4 1 : tunables 54 27 8 : slabdata 2 2 0 +hgfsInodeCache 1 6 640 6 1 : tunables 54 27 8 : slabdata 1 1 0 +AF_VMCI 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +nf_conntrack_expect 0 0 240 16 1 : tunables 120 60 8 : slabdata 0 0 0 +nf_conntrack_ffffffff8200cec0 22 26 304 13 1 : tunables 54 27 8 : slabdata 2 2 0 +fib6_nodes 22 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0 +ip6_dst_cache 13 30 384 10 1 : tunables 54 27 8 : slabdata 3 3 0 +ndisc_cache 1 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +ip6_mrt_cache 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +RAWv6 67 68 1024 4 1 : tunables 54 27 8 : slabdata 17 17 0 +UDPLITEv6 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +UDPv6 4 4 1024 4 1 : tunables 54 27 8 : slabdata 1 1 0 +tw_sock_TCPv6 0 0 320 12 1 : tunables 54 27 8 : slabdata 0 0 0 +request_sock_TCPv6 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +TCPv6 9 10 1856 2 1 : tunables 24 12 8 : slabdata 5 5 0 +jbd2_1k 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +avtab_node 502203 502416 24 144 1 : tunables 120 60 8 : slabdata 3489 3489 0 +ext4_inode_cache 74816 74820 1024 4 1 : tunables 54 27 8 : slabdata 18705 18705 0 +ext4_xattr 9 44 88 44 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_free_block_extents 32 67 56 67 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_alloc_context 28 28 136 28 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_prealloc_space 18 37 104 37 1 : tunables 120 60 8 : slabdata 1 1 0 +ext4_system_zone 0 0 40 92 1 : tunables 120 60 8 : slabdata 0 0 0 +jbd2_journal_handle 32 144 24 144 1 : tunables 120 60 8 : slabdata 1 1 0 +jbd2_journal_head 74 102 112 34 1 : tunables 120 60 8 : slabdata 3 3 0 +jbd2_revoke_table 4 202 16 202 1 : tunables 120 60 8 : slabdata 1 1 0 +jbd2_revoke_record 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +dm_crypt_io 50 50 152 25 1 : tunables 120 60 8 : slabdata 2 2 0 +sd_ext_cdb 2 112 32 112 1 : tunables 120 60 8 : slabdata 1 1 0 +scsi_sense_cache 25 60 128 30 1 : tunables 120 60 8 : slabdata 2 2 0 +scsi_cmd_cache 28 45 256 15 1 : tunables 120 60 8 : slabdata 3 3 0 +dm_raid1_read_record 0 0 1064 7 2 : tunables 24 12 8 : slabdata 0 0 0 +kcopyd_job 0 0 3240 2 2 : tunables 24 12 8 : slabdata 0 0 0 +io 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +dm_uevent 0 0 2608 3 2 : tunables 24 12 8 : slabdata 0 0 0 +dm_rq_clone_bio_info 0 0 16 202 1 : tunables 120 60 8 : slabdata 0 0 0 +dm_rq_target_io 0 0 392 10 1 : tunables 54 27 8 : slabdata 0 0 0 +dm_target_io 844 864 24 144 1 : tunables 120 60 8 : slabdata 6 6 0 +dm_io 828 828 40 92 1 : tunables 120 60 8 : slabdata 9 9 0 +flow_cache 0 0 96 40 1 : tunables 120 60 8 : slabdata 0 0 0 +uhci_urb_priv 6 67 56 67 1 : tunables 120 60 8 : slabdata 1 1 0 +cfq_io_context 4 28 136 28 1 : tunables 120 60 8 : slabdata 1 1 0 +cfq_queue 5 16 240 16 1 : tunables 120 60 8 : slabdata 1 1 0 +bsg_cmd 0 0 312 12 1 : tunables 54 27 8 : slabdata 0 0 0 +mqueue_inode_cache 1 4 896 4 1 : tunables 54 27 8 : slabdata 1 1 0 +isofs_inode_cache 0 0 640 6 1 : tunables 54 27 8 : slabdata 0 0 0 +hugetlbfs_inode_cache 1 6 608 6 1 : tunables 54 27 8 : slabdata 1 1 0 +dquot 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +kioctx 0 0 384 10 1 : tunables 54 27 8 : slabdata 0 0 0 +kiocb 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +inotify_event_private_data 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +inotify_inode_mark_entry 186 204 112 34 1 : tunables 120 60 8 : slabdata 6 6 0 +dnotify_mark_entry 1 34 112 34 1 : tunables 120 60 8 : slabdata 1 1 0 +dnotify_struct 1 112 32 112 1 : tunables 120 60 8 : slabdata 1 1 0 +fasync_cache 6 144 24 144 1 : tunables 120 60 8 : slabdata 1 1 0 +khugepaged_mm_slot 83 92 40 92 1 : tunables 120 60 8 : slabdata 1 1 0 +ksm_mm_slot 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +ksm_stable_node 0 0 40 92 1 : tunables 120 60 8 : slabdata 0 0 0 +ksm_rmap_item 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +utrace_engine 0 0 56 67 1 : tunables 120 60 8 : slabdata 0 0 0 +utrace 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +pid_namespace 0 0 2120 3 2 : tunables 24 12 8 : slabdata 0 0 0 +nsproxy 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +posix_timers_cache 0 0 176 22 1 : tunables 120 60 8 : slabdata 0 0 0 +uid_cache 10 60 128 30 1 : tunables 120 60 8 : slabdata 2 2 0 +UNIX 459 480 768 5 1 : tunables 54 27 8 : slabdata 96 96 0 +ip_mrt_cache 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +UDP-Lite 0 0 832 9 2 : tunables 54 27 8 : slabdata 0 0 0 +tcp_bind_bucket 15 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0 +inet_peer_cache 4 59 64 59 1 : tunables 120 60 8 : slabdata 1 1 0 +secpath_cache 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +xfrm_dst_cache 0 0 384 10 1 : tunables 54 27 8 : slabdata 0 0 0 +ip_fib_alias 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +ip_fib_hash 10 106 72 53 1 : tunables 120 60 8 : slabdata 2 2 0 +ip_dst_cache 29 50 384 10 1 : tunables 54 27 8 : slabdata 5 5 0 +arp_cache 4 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +RAW 65 72 832 9 2 : tunables 54 27 8 : slabdata 8 8 0 +UDP 6 18 832 9 2 : tunables 54 27 8 : slabdata 2 2 0 +tw_sock_TCP 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +request_sock_TCP 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +TCP 20 24 1664 4 2 : tunables 24 12 8 : slabdata 6 6 0 +eventpoll_pwq 126 212 72 53 1 : tunables 120 60 8 : slabdata 4 4 0 +eventpoll_epi 126 180 128 30 1 : tunables 120 60 8 : slabdata 6 6 0 +sgpool-128 2 2 4096 1 1 : tunables 24 12 8 : slabdata 2 2 0 +sgpool-64 2 2 2048 2 1 : tunables 24 12 8 : slabdata 1 1 0 +sgpool-32 2 4 1024 4 1 : tunables 54 27 8 : slabdata 1 1 0 +sgpool-16 2 8 512 8 1 : tunables 54 27 8 : slabdata 1 1 0 +sgpool-8 15 15 256 15 1 : tunables 120 60 8 : slabdata 1 1 0 +scsi_data_buffer 0 0 24 144 1 : tunables 120 60 8 : slabdata 0 0 0 +blkdev_integrity 0 0 112 34 1 : tunables 120 60 8 : slabdata 0 0 0 +blkdev_queue 29 30 2856 2 2 : tunables 24 12 8 : slabdata 15 15 0 +blkdev_requests 42 66 352 11 1 : tunables 54 27 8 : slabdata 5 6 0 +blkdev_ioc 5 48 80 48 1 : tunables 120 60 8 : slabdata 1 1 0 +fsnotify_event_holder 0 0 24 144 1 : tunables 120 60 8 : slabdata 0 0 0 +fsnotify_event 0 0 104 37 1 : tunables 120 60 8 : slabdata 0 0 0 +bio-0 180 180 192 20 1 : tunables 120 60 8 : slabdata 9 9 0 +biovec-256 66 66 4096 1 1 : tunables 24 12 8 : slabdata 66 66 0 +biovec-128 0 0 2048 2 1 : tunables 24 12 8 : slabdata 0 0 0 +biovec-64 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +biovec-16 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +bip-256 2 2 4224 1 2 : tunables 8 4 0 : slabdata 2 2 0 +bip-128 0 0 2176 3 2 : tunables 24 12 8 : slabdata 0 0 0 +bip-64 0 0 1152 7 2 : tunables 24 12 8 : slabdata 0 0 0 +bip-16 0 0 384 10 1 : tunables 54 27 8 : slabdata 0 0 0 +bip-4 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +bip-1 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +sock_inode_cache 667 685 704 5 1 : tunables 54 27 8 : slabdata 137 137 0 +skbuff_fclone_cache 35 35 512 7 1 : tunables 54 27 8 : slabdata 5 5 0 +skbuff_head_cache 302 450 256 15 1 : tunables 120 60 8 : slabdata 30 30 0 +file_lock_cache 38 44 176 22 1 : tunables 120 60 8 : slabdata 2 2 0 +net_namespace 0 0 2112 3 2 : tunables 24 12 8 : slabdata 0 0 0 +shmem_inode_cache 774 775 800 5 1 : tunables 54 27 8 : slabdata 155 155 0 +Acpi-Operand 4563 4664 72 53 1 : tunables 120 60 8 : slabdata 88 88 0 +Acpi-ParseExt 0 0 72 53 1 : tunables 120 60 8 : slabdata 0 0 0 +Acpi-Parse 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +Acpi-State 0 0 80 48 1 : tunables 120 60 8 : slabdata 0 0 0 +Acpi-Namespace 3311 3312 40 92 1 : tunables 120 60 8 : slabdata 36 36 0 +task_delay_info 332 340 112 34 1 : tunables 120 60 8 : slabdata 10 10 0 +taskstats 5 12 328 12 1 : tunables 54 27 8 : slabdata 1 1 0 +proc_inode_cache 1008 1008 640 6 1 : tunables 54 27 8 : slabdata 168 168 0 +sigqueue 35 48 160 24 1 : tunables 120 60 8 : slabdata 2 2 0 +bdev_cache 32 36 832 4 1 : tunables 54 27 8 : slabdata 9 9 0 +sysfs_dir_cache 11356 11367 144 27 1 : tunables 120 60 8 : slabdata 421 421 0 +mnt_cache 37 45 256 15 1 : tunables 120 60 8 : slabdata 3 3 0 +filp 4614 4700 192 20 1 : tunables 120 60 8 : slabdata 235 235 0 +inode_cache 6883 7308 592 6 1 : tunables 54 27 8 : slabdata 1218 1218 0 +dentry 61120 63960 192 20 1 : tunables 120 60 8 : slabdata 3198 3198 0 +names_cache 26 26 4096 1 1 : tunables 24 12 8 : slabdata 26 26 0 +avc_node 518 1239 64 59 1 : tunables 120 60 8 : slabdata 21 21 0 +selinux_inode_security 84146 86072 72 53 1 : tunables 120 60 8 : slabdata 1624 1624 0 +radix_tree_node 11579 11781 560 7 1 : tunables 54 27 8 : slabdata 1683 1683 0 +key_jar 11 20 192 20 1 : tunables 120 60 8 : slabdata 1 1 0 +buffer_head 221286 230214 104 37 1 : tunables 120 60 8 : slabdata 6222 6222 0 +vm_area_struct 12992 13034 200 19 1 : tunables 120 60 8 : slabdata 686 686 60 +mm_struct 145 145 1408 5 2 : tunables 24 12 8 : slabdata 29 29 0 +fs_cache 177 177 64 59 1 : tunables 120 60 8 : slabdata 3 3 0 +files_cache 162 165 704 11 2 : tunables 54 27 8 : slabdata 15 15 0 +signal_cache 208 208 1024 4 1 : tunables 54 27 8 : slabdata 52 52 0 +sighand_cache 198 198 2112 3 2 : tunables 24 12 8 : slabdata 66 66 0 +task_xstate 232 232 512 8 1 : tunables 54 27 8 : slabdata 29 29 0 +task_struct 303 303 2656 3 2 : tunables 24 12 8 : slabdata 101 101 0 +cred_jar 580 580 192 20 1 : tunables 120 60 8 : slabdata 29 29 0 +anon_vma_chain 7904 8162 48 77 1 : tunables 120 60 8 : slabdata 106 106 60 +anon_vma 5773 5888 40 92 1 : tunables 120 60 8 : slabdata 64 64 0 +pid 322 330 128 30 1 : tunables 120 60 8 : slabdata 11 11 0 +shared_policy_node 0 0 48 77 1 : tunables 120 60 8 : slabdata 0 0 0 +numa_policy 1 28 136 28 1 : tunables 120 60 8 : slabdata 1 1 0 +idr_layer_cache 428 434 544 7 1 : tunables 54 27 8 : slabdata 62 62 0 +size-4194304(DMA) 0 0 4194304 1 1024 : tunables 1 1 0 : slabdata 0 0 0 +size-4194304 0 0 4194304 1 1024 : tunables 1 1 0 : slabdata 0 0 0 +size-2097152(DMA) 0 0 2097152 1 512 : tunables 1 1 0 : slabdata 0 0 0 +size-2097152 0 0 2097152 1 512 : tunables 1 1 0 : slabdata 0 0 0 +size-1048576(DMA) 0 0 1048576 1 256 : tunables 1 1 0 : slabdata 0 0 0 +size-1048576 0 0 1048576 1 256 : tunables 1 1 0 : slabdata 0 0 0 +size-524288(DMA) 0 0 524288 1 128 : tunables 1 1 0 : slabdata 0 0 0 +size-524288 0 0 524288 1 128 : tunables 1 1 0 : slabdata 0 0 0 +size-262144(DMA) 0 0 262144 1 64 : tunables 1 1 0 : slabdata 0 0 0 +size-262144 0 0 262144 1 64 : tunables 1 1 0 : slabdata 0 0 0 +size-131072(DMA) 0 0 131072 1 32 : tunables 8 4 0 : slabdata 0 0 0 +size-131072 1 1 131072 1 32 : tunables 8 4 0 : slabdata 1 1 0 +size-65536(DMA) 0 0 65536 1 16 : tunables 8 4 0 : slabdata 0 0 0 +size-65536 2 2 65536 1 16 : tunables 8 4 0 : slabdata 2 2 0 +size-32768(DMA) 0 0 32768 1 8 : tunables 8 4 0 : slabdata 0 0 0 +size-32768 3 3 32768 1 8 : tunables 8 4 0 : slabdata 3 3 0 +size-16384(DMA) 0 0 16384 1 4 : tunables 8 4 0 : slabdata 0 0 0 +size-16384 12 12 16384 1 4 : tunables 8 4 0 : slabdata 12 12 0 +size-8192(DMA) 0 0 8192 1 2 : tunables 8 4 0 : slabdata 0 0 0 +size-8192 27 27 8192 1 2 : tunables 8 4 0 : slabdata 27 27 0 +size-4096(DMA) 0 0 4096 1 1 : tunables 24 12 8 : slabdata 0 0 0 +size-4096 425 425 4096 1 1 : tunables 24 12 8 : slabdata 425 425 0 +size-2048(DMA) 0 0 2048 2 1 : tunables 24 12 8 : slabdata 0 0 0 +size-2048 578 578 2048 2 1 : tunables 24 12 8 : slabdata 289 289 0 +size-1024(DMA) 0 0 1024 4 1 : tunables 54 27 8 : slabdata 0 0 0 +size-1024 1332 1332 1024 4 1 : tunables 54 27 8 : slabdata 333 333 0 +size-512(DMA) 0 0 512 8 1 : tunables 54 27 8 : slabdata 0 0 0 +size-512 1123 1176 512 8 1 : tunables 54 27 8 : slabdata 147 147 0 +size-256(DMA) 0 0 256 15 1 : tunables 120 60 8 : slabdata 0 0 0 +size-256 930 930 256 15 1 : tunables 120 60 8 : slabdata 62 62 0 +size-192(DMA) 0 0 192 20 1 : tunables 120 60 8 : slabdata 0 0 0 +size-192 2119 2160 192 20 1 : tunables 120 60 8 : slabdata 108 108 0 +size-128(DMA) 0 0 128 30 1 : tunables 120 60 8 : slabdata 0 0 0 +size-64(DMA) 0 0 64 59 1 : tunables 120 60 8 : slabdata 0 0 0 +size-64 33063 40887 64 59 1 : tunables 120 60 8 : slabdata 693 693 60 +size-32(DMA) 0 0 32 112 1 : tunables 120 60 8 : slabdata 0 0 0 +size-128 3921 4800 128 30 1 : tunables 120 60 8 : slabdata 160 160 0 +size-32 332419 332976 32 112 1 : tunables 120 60 8 : slabdata 2973 2973 60 +kmem_cache 191 191 32896 1 16 : tunables 8 4 0 : slabdata 191 191 0 +Inter-| Receive | Transmit + face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed + lo:267102759 105357 0 0 0 0 0 0 267102759 105357 0 0 0 0 0 0 + eth0:1013758516 1354506 0 0 0 0 0 0 245531629 966810 0 0 0 0 0 0 + pan0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 diff --git a/test/aux-fixed/exim-ca/example.org/CA/pwdfile b/test/aux-fixed/exim-ca/example.org/CA/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/CA/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.org/CA/secmod.db b/test/aux-fixed/exim-ca/example.org/CA/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..c7f115bd68bc7da12b7a8cd053cac6ff48a39f80 GIT binary patch literal 16384 zcmeI&!Aiq07{Kw*O~wu~y?7G|c*srI0~C>Zk)jOd3)D6nWwjk`2YT=^yo%4{$)ikP zLo{tBIs^|M#*qI9A<38YOZq!UI=i8Wv_v)^MRx2^wnR2;S2yV{26nwkw41(Ja+~h5 z+ZUUwqux`ul}FdzXXWQ|AOZ*=fB*srAbzL2LcEnfB*srAbwSK5kxxu^V#=sUrd5(>^@@9k o|Ij}2>|OV5`w_qW-`hKZ00IagfB*srAbm$1DNwf{{R30 literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/expired1.example.org/ca_chain.pem b/test/aux-fixed/exim-ca/example.org/expired1.example.org/ca_chain.pem new file mode 100644 index 000000000..45c5c6329 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/expired1.example.org/ca_chain.pem @@ -0,0 +1,47 @@ +Bag Attributes + friendlyName: Signing Cert +subject=/O=example.org/CN=clica Signing Cert +issuer=/O=example.org/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAyWhcNMzgw +MTAxMTIzNDAyWjAzMRQwEgYDVQQKEwtleGFtcGxlLm9yZzEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJ2Y6E5WBXQE +zFsWgxK4JXrpPWGEQZ+KNy3iXgmupAA6Yy0umCLu+eGCekkwZ0WfFhhd+Qy7P+qo +F0mre7VDDHECAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm9yZy9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EATmemAFFWLNA8natXhFyhrDYmTv8X +PEJ3UVt0DmOMxmEBahIeDfplfTfj/NYvy/on7YCZO7F5PwVY2pNJqm8Tmw== +-----END CERTIFICATE----- +Bag Attributes + friendlyName: Certificate Authority +subject=/O=example.org/CN=clica CA +issuer=/O=example.org/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBaTCCAROgAwIBAgIBATANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAyWhcNMzgw +MTAxMTIzNDAyWjApMRQwEgYDVQQKEwtleGFtcGxlLm9yZzERMA8GA1UEAxMIY2xp +Y2EgQ0EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAxY7JyBAI+e4vb4bz0HcjtE+O +x0nLBB19Kz04yNARj1z/ZvY2c+uvOR3muHROCgFUQxGobP3n2HaTS/cmv2SVPwID +AQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjANBgkq +hkiG9w0BAQUFAANBAJLhs/m5Jx4oV++aylcAvIHa0vHSK4eh3zX1HqWwqK9I0/nl +LqwwPgtgHQOpe7nd2g2B9wPZ82i6LiqY76A+9hI= +-----END CERTIFICATE----- +Bag Attributes + friendlyName: expired1.example.org + localKeyID: 0B 77 EA 83 E1 31 8B 71 88 DB 88 4E DE 08 91 19 A5 4A 4D A6 +subject=/CN=expired1.example.org +issuer=/O=example.org/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZzANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwM1oXDTEyMTIwMTEyMzQwM1owHzEdMBsGA1UEAxMUZXhwaXJlZDEuZXhhbXBs +ZS5vcmcwXDANBgkqhkiG9w0BAQEFAANLADBIAkEA4TTv655lwyf5lL4RkuLHqPdg +mXI36dkjEL/864WoszwLRYYfnlOj4hmKfjq9VoslfDRnOoZSm0NebJJ9Y/ea2wID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm9yZy9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5vcmcvMB8GA1UdEQQYMBaCFGV4cGlyZWQxLmV4YW1w +bGUub3JnMA0GCSqGSIb3DQEBBQUAA0EABG4yReI+VPyFc3kEejJr31rOi3BpgEfP +FsN+9WoTa0B+VW125F47/FySYat+M6KBSW8fe6HFexU6FXQF+mCNvQ== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.org/expired1.example.org/cert8.db b/test/aux-fixed/exim-ca/example.org/expired1.example.org/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..133a82f80263444a6eab6f40e2ef3b8cc26abcec GIT binary patch literal 65536 zcmeI*eN5DK9KiAK?;hxUI2Diw=XfwfR204k_|VC55_8GiXr_Wgaxy%RQv`y`CxQv- zwOQGQv7t`I=z+p%&DyjgTh6p>8ucQ)vg#Ngr+w7DlFYQ>U!4+W7oFpk{GV<*A`V=Qd@n| z@6p$XzF7SIdFapOfe0Xg00IagfB*srAbNRO({reuy3_D*gIJeKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~ z0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q6&epugU^PK1katw~sA zwf44J7uFjMnn8V~HDK6O-+W)2RnyF7A*a~J%Af$_64UVD5v~n+YfB1U@x`TXTc8}R zpEU+s@(VrrdC}=?|ME#y9Q=FV4W9wt;C;BE7c)ca|goOOk!uTF6359uHSD80n zo$lFh1!+tZneMm5!mMd$QuZ`uZ^_+%VCJOE&ajjx)-PP<9hLv`7kS$1ph)X2SH-ML z9p5LMz7_lD=ACoi-{>?iJ-;L4-QwWgJzazvsrw%qi+attCPIbKNjct6-3@9sXsG_)Y?9r;Nr^3_C0?4AfoIrr@MfKh%ix%KK^ z*YVi)*FFubX*t>0wqj@LtSjdxjycwGb!+3{lo9iMQF|9Pw2a$UX>ZPYDdzcPx83*j z?)2q_H5K`7yMFXXdDUmKs=0TZoBoo~dQ8XYaULqi23X<()O>%$sQtHR7*fn<;!(~(<~*HoGGdR0boRQdiBonGEZ@lu!x_XKIaB!s?*~9Jhe8}>}X9fJ04VZ0op+T0R#|0 z009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{ z1Q0*~0R#|0009ILKmY**1}Sj2!o*q;s*N)r_Kbvn%lYR=FGCIhaQjk^@ulfxVAVw zu(9y=Z$GTtv7l|zv6Zz>f5yGad+(=?gw{I;U)7rEU2H?8wbxuc+Ejt6STopckmaBunN(u-h^HwVlX8qj6=($S7jb%4C$AKUcL4IhY%t9P4gEsg&10< zzww@>9B%imw!$$22q1s}0tg_000IagfB*srAb +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIL+kummor3pQCAggA +MBQGCCqGSIb3DQMHBAhpvl78t5As+QSCAWBlOt1XpYY+o5G0MSANfiL7BfKlwwYh +MDpKzsNWfwxrNZNmeT293TKVlXEav4FsEnbU0yVJ0HSLC1peXM32mjdezDdMQAwq +QPrIRj5r5m4mTTWhUPnDUrzdwrYbD4flg0H6eO7gX1w2gJw8E/LS8nhAy6ZOfEvL +jlghGljcALDPVDvNEAtcx+Wd4p71vp6wm/3kl3SAl7WXO1HcKwYYIEEL9DFZ/P4n +kqlgCu3pcgKbH9HHjImOkYRWP2Poy3OLJ7h+i/rIEaxiaJFt/1zTm+DxkkM6nbwR +2C0VnX6/gSbpz58xBlJUMiZqvh9ciFhuLCYeiJx+HnKKzTEIfnSyKV7Y7GSzqkUE +kKPVa6NTXq0nlH1fuecTGv3iUE4AXWJPmGNYS0caR8oTFd5pFlOQGazRjLDxTIb/ +N6zXiTCpQt4MWHi71a/GnfUrv0e/Bl24ARJnVWcP4brT8jA/oiPeQGEq +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..0825ec70af11c496860d85cf547889b2933a34bd GIT binary patch literal 725 zcmXqLV!Fu1$grS^>6Aee(=j$qZ8k<$R(1nMMwTX~?LeW;291{%niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>BwscBRs;yBE%wanN4;B$E!OW zQ=SW+UJ|KlWx&hEsnzDu_MMjz=v@Y8M~14?$2VE@`(2%HvVPa(Ums&Dn-cH(u*&rC zE(t#TI$XDh;rq{y@0(g$S&s7&)X3Je!sPga5Opygmj2#9|j4eRi z0K{4gn3))vm>8MSY%(y$5s=abl8}HDf&?Te3^Vi66`WIxN(|)0d67cWC`z2y*unr7 zutrhj#EwA>vdb8OVc^YR;KAg`Fg?(ie}nnwbJx1=HSh2XvwCuu!%i@i(J}j6ph#Kl zU)~$td_i$?4;wuWOqQ~BK2)AQ*Nt-Q=XpBOeV$t?yT6|Gam@Q wzR<36)V+}N!M=7rXE))=`tPFNc&bi$yt&-{@rqxZE?Ms;oizJ;=8(iu09e)6%>V!Z literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.ocsp.good.resp b/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.ocsp.good.resp new file mode 100644 index 0000000000000000000000000000000000000000..e786da6b8319e972ebebebaa22fa084b6681a860 GIT binary patch literal 706 zcmXqLV%o>W$grS^X}dua(`GhKZ8k<$R(1nMMwTX~B|xDC295g{niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bwl@`^^4Awb#X$_4nQ?Us>XHnSoD+ zHQn&Wap6B=I}@``7QAH?GxO+cz0bAzNUZ&#%RQUj92PV&b{I4d9RWJHb#!$Lw=~B4x3Ed2e*{1;xod za9p!Q|DW2Lz|W1FdYkN~%`(V*blF3cO-q%DnUR5Uv6g{`0UyvqviyvU|5;d=nb;c) z#6Wyi5TD0@i;V-4te82G-2sV<)VIA%xvdgTd3ruGnH2lGvtoD8d?5V#Lc7XQ_d?DG n``Y=O-GnFWzl(a~sXFEH=5qJPD}HghWWAeo((LP*LlQ>;8Vu0y literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.ocsp.req b/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..75ffacf13f3f2d002a859cc10ff2ddd8cfbac79f GIT binary patch literal 105 zcmV-v0G9tSXE0?jJ}^8mIxqH2QUEw1QG-g(*_-|28wE$(@8c?Z8k<$R(1nMMwTX~T|l9228~x2niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bwr0X-zk&&c?ng@u`ky}>{X#8(CJc?`JNI3S6QnG@L^khn;F+sl;OD&dr;=QEQ@ zvA;VjcK6H&!mls1s~mMNb-}b(9zWc{L_x$d;_n-Sa=MrN;~F)c5{$jdA5D=hKqp z(?M=b-o6GiKQ%My!piE+%O(g_B<>8=bz@Uz*i~27q$sWG1_0FTM1kqO^J{HmfIT+E z`gIItOa2U$QBf^-E}_+;BvseIeteM@IcwT{k{O5dyR4>rWwUHcY(dGfW}FD_gFgib z)}1&UM`i3Z@FhcAWkd_}DYxqxG;QN+dd{S>eD6$3ALf9OXsW#;J|yr?hFN3gxka2y zP|Jx4$)(r_i_?gDK-dDZ?+Yx@{5ea~mD;t{dbPCXVx}h^*U!p&Uq80`IX$wjL)apE zWI+O^nc>0LRkmAS(WM@Bm3d zSR5HKb8VEA5|SiHvi}H6!xq}uaR7hC-wlD}>Ya8)?^T^90iKlPpOOU?QdaD^Riy?H*->(GhMMiXNH@$eq#?+pchUe4~>Mg^5zGpQLW|u98)x)%A$CR*VPlW{IOjK2I62@KUFPNTRv3aQU}If3KlOQ!;3^Zzv4oY zGb*02Tw0QSfWe04Q7K(s;x?#F1yCoNwASnR&=U;@6rnQ>CWWGjTZZ4fQ|xefTo`-2S8ijFZWDvq|1B{p?$ z>iG%Amcj=WztRHHh=zq?c)FZFnP#%%q*1A;LL_ew5EI9D;>Ftma^Qo=`$Ir z@#}xy@c9BUYaDjWPS7!*>Kz7U_xfE5!Y0nkr%Q%iOf(k*=KWd?EOLH+2iv##<@s*O z>Fg<~0HRqQlqrc=YRsEz_dWL$l%j!QS{~c)kUaW3>TB~YgrR%-gDd>7pe{qh$Z2W$ zaMB^j(wJMJ0ctaP*9dBK-6n>H1*ML9s}#q*m@$*_tTD=Vc&>UP#iU9lP`7ZAMLCA= z+IKi*N06y&j3@>#y5JM)-f3G7p)MuJ1ti(~JA((*3Cqly*>^URvG^vtN7jUyWqHvK z(uwWJga(TeRG9KzQo_LNv4N9hY4}|Y-v(|0tcdVP89l{|yPEE36z`0<-Cs^3(@~{u z#qsi&RPifz8U{`_kq6jK*bR~?emY$a!TG*tIZrd($25W zGQCut>q)1q+%!1jhD5YSWM!we{+W1AC!#VYIQJe$uPI?C#`vt12byhqRA|ThyyBOy z-~xMYl~ivhYd*@HAiA90f|Xb=EdozRRT61qP^0Q=R!E6=v#BwdQ$Zchr3PUn4tx@| zO$m+u*}!L|khg#E16PKA{fSg?>2T@m?K`=3K0T&1_FC3No+5p{+dF`DX`Sn}+ilbE zSn=1DitGc749~D9^4N=8qTO3FLiW!*31?aA>#N^J>9JmiU{k#&oJx|Q)4^eE#60m? zofvpVo!c?|jQ}oqT557s*}B4`M~xFM#l4}Se%L&M`~$iv1dtAoL^4sH2#0_*_6dQ01OtS{iPg3>6_)kPIyITG`=PtP4865s2xGK3n1<_2_Ph+L PADM6W+vV@i3;_5C7p6E# literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.pem b/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.pem new file mode 100644 index 000000000..13da50bbc --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: expired1.example.org + localKeyID: 0B 77 EA 83 E1 31 8B 71 88 DB 88 4E DE 08 91 19 A5 4A 4D A6 +subject=/CN=expired1.example.org +issuer=/O=example.org/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZzANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwM1oXDTEyMTIwMTEyMzQwM1owHzEdMBsGA1UEAxMUZXhwaXJlZDEuZXhhbXBs +ZS5vcmcwXDANBgkqhkiG9w0BAQEFAANLADBIAkEA4TTv655lwyf5lL4RkuLHqPdg +mXI36dkjEL/864WoszwLRYYfnlOj4hmKfjq9VoslfDRnOoZSm0NebJJ9Y/ea2wID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm9yZy9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5vcmcvMB8GA1UdEQQYMBaCFGV4cGlyZWQxLmV4YW1w +bGUub3JnMA0GCSqGSIb3DQEBBQUAA0EABG4yReI+VPyFc3kEejJr31rOi3BpgEfP +FsN+9WoTa0B+VW125F47/FySYat+M6KBSW8fe6HFexU6FXQF+mCNvQ== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.unlocked.key b/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.unlocked.key new file mode 100644 index 000000000..132d2da54 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/expired1.example.org/expired1.example.org.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBOgIBAAJBAOE07+ueZcMn+ZS+EZLix6j3YJlyN+nZIxC//OuFqLM8C0WGH55T +o+IZin46vVaLJXw0ZzqGUptDXmySfWP3mtsCAwEAAQJAbjXB08TIeCDv+uKpJwDk +RMQK+gzzX/VrO5843umiDVPBs3FoDJJMMI1YIxiqmj61BNvh6YdTeYMbgsqdvUT/ +AQIhAP2hXPtUNCfSMbDZujRe7weCDynq2SdT9v5GwCABKNRLAiEA40+XExCBf3zV +Eibj6fEWBlJjQPjCEvFLkbeOi44UmbECIF8u9qkvkZ88J//ZxiKvWf80VSKDC1nS +DgihXqrkJIF/AiAhsUBhUQcA0I38fMs3d8ad9URE8xpBGIbs+FomkU64YQIhALds +zCAiNfSE9O4vQvnSlbPdKT5KSbux/uGuPIhK+RA0 +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.org/expired1.example.org/key3.db b/test/aux-fixed/exim-ca/example.org/expired1.example.org/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..4122a84e9a835d081fa9820e594a65624a186f65 GIT binary patch literal 16384 zcmeI$`%BYN6aetMht5*>?KMs2Bbm|jn{Juf(q5KY*jj2YD{<*}mQA<58e8NNtxc&| zsaxeF!;&%;wX9%0TqUK^gAyy9_QMubPUvMdSCiVTANm8r2+o1SIox~UTt2_ui`-cv zgb)=WdKW?yoGtP~h~g}+L>|8z=lIAjTo8sk0p=EUGC(GpRPuiMBrZtE!os^04^5jx76VKQ|WbC4C zAjrI((p)OKh50bOm_E$^<;Mc<2?8Jh0w4eaAOHd&00JNY0wD1B1ZapwC}cZHB9l9h zP>6D55@Mc|%tB$s6iwJn_dlPRVSe-}y0@(kyxOo1mx>3pi=*RBu{JK1LZKH^(sNRj zcHKvzI!dr)c}i1&b(J#v`6NgE8E@9bG(np2SmSh)JR(MWs&2n|)zN_J+XcaQdiLfF ztsKPT3}@r9D+D1or&OlYDpbde!Z_c~is6!k2Y!z$d} zE1LLXi|~Plsj+lEP5dp}y(WL7qheji%+K?OQ)766_iHuh7F>xJa3tIFk%zJ+ z*Uq^2rXy~*{`9N&@-iOj!({Wvxz@I=)oo;m#eU^US`!>()3j73$A%EQf literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/expired1.example.org/pwdfile b/test/aux-fixed/exim-ca/example.org/expired1.example.org/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/expired1.example.org/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.org/expired1.example.org/secmod.db b/test/aux-fixed/exim-ca/example.org/expired1.example.org/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..fb955213bff4e7d8c4dee7f119d7f963bcbf4cec GIT binary patch literal 16384 zcmeI&O-jQ+6u|LkE2RsGZrq6sxX7;10|Xa!BSk6H3&dnvhNekKQ>Y7%;oc*73fILe z=n345PBIlOg19P0{sWJhdGqEYzjdT_7>Yvf`8_w|x1 zx=U}LZLVrnO%)q&ZTFsy-^+yvAb)H?DeY-2R;gUy} z!=XA)OI@U4q6YomP@QzU>LQEhiMCY_QI?L(I5tJ#>qTw~9d|o=5l-_&cd}yat4J5+ zpwJ_;2z*~n^v%~~rlV;V2fph&@wKl;NjRPbYM#eosq0hy)ugv}jw|SYKh33#J@0eN zRW{M-nVv<3$xD-^)r$KM|Gs$|*w-K1_|bm*;f?} E4_X9F8vpc}c=1 znL!Oi7UIMpBjYjTOoL*?@1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009IL zKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0;DHm+-_BeiVnwXBLs(_0 zwoR2ul}3YRP+w^^cNtVRzO2EjX(1s(CfR$+2($4SQ)pyY_u}07MFs8@uP@&oF1zbT zjggkT0#9CULS}}HkFnZQ?RIImr=|^+sncVuX(Q#WU76NSRlVfHfvO?`RXy#=FZ2}V zCuF*Pewov{L0X6~P7rduAwz7a_&Iw@h~MQ7i3_1T?m))C1 zdft$fioTZ{&y_CClKJB{M#nze*zJI;zB(pr$Fh$yyDcynHKA2am(ygJx_Ml8O=~il zl!3YVY2zaGeTy`!l|d6SRllaUDOo1T#LE7a{mS~x_4|v`ZMHmLK}stYTS2bhUF=U$ zhg-K>K^ikecK%i|Y0BVQ$A%qKSLSTmIeb8NQ;g%WMU!Uu!}4A~oU6@?h__yMFCTH? z?^Cwp*Ap+Tcx%-AOI#t-&Xi}p>y3Q7wTnW1)Yp z*XQvs5n`}9-GS*Jjo zU`E;79w&PR24K%%wd>(BM*kSPh$vZV2vOm(ClD?Mb<^A8rBj2vZRDh>$Weim+7d`< z)9={CcB5q1la;3$LNA@o9^2!Cqr(;~>{VOus+!PbN~$r|%lYoJ);j8BZ@n$yrdSzW8nh2@>m?P8 zrq9Y(ge{30b)sbA*3|upGrdU{clqiQ53ib4U%h?!q8k_2eP30Uz4p}M?r*Mt=ZU0q zrg7n!J+9OqtC5@2pFdstO|X%oVytt6(4vO#6t}O~<1G{xQSbWP^|9+E*W)hXIypMi zImDUiyjR%;s0RTA5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY** z5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#}ZuL8FcT+A2IYPP;dmB^L^7us!8 z!8?$e;Eo9{?mo*wyA$@mSbgkh4@=`^o44$0?V^5rC$2t{b=(xUJlQ$&Xl?kKoTfR~ zh8O?3=h3(y_xZC!waJ;`)de?x`u4^02@L~2nZ3>xn6R&=%?C+ip|zdDuTovK&0U~o z#jid0VPj2V{J^PK)_*xw94t9g_j_IPE1SL>_E-Ft_p0}dKiT+0%1$}D>&!Ug_GL9^ z&sa+ujHj>8-Jde3;!5S{YZ1YdH)tJ6E)mG|U=^ZGx(hu;MMpAT7(0~=LQhsPtW&=< zv}vtgPoFzxZ7>AQA#me?%QwRVA%Fk^2q1s}0tg_000IagfB*srAb +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIqYRYZdwd4cwCAggA +MBQGCCqGSIb3DQMHBAguS/XNjyFFMASCAWBxEYbvvuvMpVOunc6orT3lMpGxNbCV +kNeLvBHH2LkW1lQfLoo0zgqzyvjF7hTbeNm9NS8dL3ZzMG7Xb3hiR22ypuP7gdaA +NFxt7XfO7pCLsFScmOthYseIBvuxAGN8Qze2KDrXTVnOyrgPGk2q6XTIblUnGekt +MuxJAJIIGW0le9Ci23Z+156zv7BAPWiAR7qL4Lm6V3T4ppfSeGkpBhGVpCmdjnT1 +IhR4rcrLjvqE+QhqEY/gA4chFcnkZsmcLNjMAMgHXdsGgpkrv8WrbS4nTsNY71p5 +d+qA6Z6ORVyUOrxzr34NpAM9tpsvHniMEvlJAq5DMz64qnG/iZymTKH8tOhgvD9d +a7pENj+x1Eo+qb/2g6zut4+O5WnkWfXQXtuh+rnUOB09IteV33o8OYOlLR0eQxqJ +BOLi5FgNVfoSJuCZrR9oqufOb4ue7x7lmOw0r3EQYUp0weYLvDyh0ih+ +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..44f9d0057b89d6031a29bd9a15b618f4879806d5 GIT binary patch literal 726 zcmXqLV!Fh|$grS^>9j!;({VOVZ8k<$R(1nMMwTX~9YCQi291{&niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw@5qwPB{BhbGL%#I9spO?O?unbMu@MZtqsN=CKLex22CpDN~ zxc+hvyF2?Ij(z^CCl*#I_NL2lr99JaW)1mmxv6u@^UPJxlHwlZ%zV9|iLt|=iLnKU z8-Q4A0W%XL6B8pdnoS1AI6_j|KoSy?LXeOI1!87ix`K0RQHg<^I4@FA8byio8e15^ zLe?mXoaix#L3SAa@YxmGCF3T3lu4f z{mXl!n=dF%?t$Z)CHnu=)&zcT+|=7-H*JR(_>Bw-46F?}*;uvtn3<$l8CXQVzKDAK<3O=!`UFl^#dXtrGFIrxvWWaEiwU~Z zEuZ%(-w;68Ewp5pTzFdCe7o}a@v#rISOS$bXl^Dp0^CE?tQIt5Zv4sIF7>%OHi3@`m zWS21l!@!%tz=O$=VS1o3{|58V=dN|#Yu@1(X7%JQhn-+3qht2DK#{W8zq~iP`GVr) z9yqR9qW@2AP2lIoO}$Na(`FfDKDz87%BH2t#LURRxLC_T!+;OyAz6M##{VoV%uMVJ z24Wz-Du~Zxz{SP^NmtCA$nJo|Me5sLrrcHur#wBMnM{iP-C41_XFd>qeW6|DsCyyj ogMICM&Thh!_1{Ik@l>7icyqb?;}yR+U9#RyI%)Rx%pr-R0QL;gj{pDw literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.ocsp.req b/test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..96cb53d1611e536bc6f805b69b2bb4ee78d761c8 GIT binary patch literal 106 zcmV-w0G0nRXfS3lKQKKoJ1_|b1uG5%0vZJX1Qhk?TI2Y@a}{Th2?ZgpmyBqrE*%6E z{&rka+=~(-74KhB1OaVbRApUu0s;Wbq9ZUNFdqg9D+U1t1qUzz0t6BS5NU<0jfaGq M>HeL7g!c1h`f7?IJ^%m! literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..0760bb3fde7c14b616e8306a99968f0a630021df GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXQVzKDAK<3O=!`UFl^#dXtrGFIrxvWWaEiwU~Z zEuZ%(-w;68Ewp5pTzFdCe7o}a@v#rISOS$bXl^Dp0^CE?tQIt5Zv4sIF7>%OHi3@`m zWS21l!@!%tz=O$=VS1o3{|58V=dN|#Yu@1(X7%JQhn-+3qht2DK#{W8zq~iP`GVr) z9yqR9qW@2AP2lIoO}$Na(`FfDKDz87%BH2t#LURRxLC_T!+;OyAz6M##{VoV%uMVJ z24Wz-Du~Zxz{SP^NmtCA$nJo|Me5sLrrcHur#wBMnM{iP-C41_XFd>qeW6|DsCyyj ogMICM&Thh!_1{Ik@l>7icyqb?;}yR+U9#RyI%)Rx%pr-R0QL;gj{pDw literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.p12 b/test/aux-fixed/exim-ca/example.org/expired2.example.org/expired2.example.org.p12 new file mode 100644 index 0000000000000000000000000000000000000000..5bd498bccbac18cb280ed915aff348a901868c4d GIT binary patch literal 2388 zcmZvdc{CJ^7Qko57zTsvSq4Rl#tcS-m~1f=lI&#}Yaz)x*0ID_5veF9P1bp`QwU?H zBI_humM4Rvv3+C=p1!yB&UyEbd+zz&bMHU*cg{r-K|nSX5du|A#3gRSfE++FQH}_X zDp5VmQD)jH5 z;NFhx5q_>9@}(dn`O8o{fwP6n@W1brJa-dmR}OeEKZ+|50Jaa+o2K$#P-jVKeDoIN z;nNOZf&H-+{n@BxY7A(o`Xe%_iLRnHqbyc8knP-Ymz`u+5Z!t@^-=vRbpnKc(95VU zGlA_Ce7WsT44w^OHaGon5~91+BCDcp>KBQ=(whRA|B!xia5JnK(F)(B^^IN2zguy~ zD)?Pywgi0rO&`c9SajsTK5LAOQBi8B&Vh-zE_?|mL_A?#sHBa8nsF@MDEIi9BBWmo zQ(xOfEOMJvXSX<7o~{%&OfFM_)V`3BGDG5>^468dCo;hgs%{!$>PFHLu+$foagpTH zwIsvpis42ItCMgL6X7b;#c;D?R`O(f7Ov+*O;NepjXA6D)FReo}W@WaHEf zh&m5`2|+#-4sz?hv+sujZGL$bpBesG+=IR|-_3=8SjmveK^Hr$t2J6F!$Y|I@5>ge zz`nmx^VedtEVFV_w4Bfq8FV#uDe2noNwC!ly<2#ovJ2Mswa z6|-AbJ@TmP?43Y!<1gdVVs0+F3&x6wVWkcW7L@bK7Mg_RqgOM>+lGlG`rNzO9e5<9h{RcGF~ zxHN4N?!F}`TZ9zs8b1%E=%H-}z6~b>{Qn-V*Yvy!!o51!2RteJy-AHS2T+H*q*1U*55}b-gaC@ zs!>~PF-xMkDGw=CzP;3?nY&LB{S;gl${TE4U-oKIf0sYqWU-3Aj|vTO9Pj(8XPU_- zFLd_(_6b7csbl35D{giJr0UTz#A6K|>UFLC{L}hTtK|$o1sg@gk0)PcZg`&ke3t_e zg0)~&%f>I!T6m->hDYBBALlKbQQUVBLx>6p_0`d>Ve0UQa-$QE}V-e@vZkI{vk%kT9mE&qFR$3XH4}) z6GL-RDs4)obnb+~h*&}vIiQc0AC?dx%94*-88&p}dQqpx31rG)L9#7{-m(TK!i0OF z))Rwn(VKWQ=h(X^P?lu!q?0XZT3s^`eePKpa|)l8zO7Vh^pWjSVvvpCW$l^1gMj|1 z(o!CmhsoMzS6@dD!DlaOLEM#Twr!(!c~`973~Uvb1m1~jNy1o|K{%vCvAco#)A2QJ zk;oH`{U%S+8e+-uH_Czg1AYa4(i*xEW5*^I z^iAaucu9JQoS0i~V6qC67IXYDXq_hILcwH%z9lca6a@hF*1*6 zp1NhmS?_&MCapU>cz4oP`lXcfR!i>8`S!wllp}iSWXv^aa%;EERj;5DU=+gL>pCJ} zaxlJ;T4cKPwEb2d^nxdhXtm?Xz9WhQVFON2MolRj(Ort_kx#&!sCC`lB;`%QKcCs} z8KsGmML{9#O1x|!adrS$NatkXpyCu~_{CgchVB9rhfXn*1M~CN9}I51JZ~JpC%7l< M70>r902g=cfZ4}?i}tcQcKa1Au8GOnztjbiKJA{xpYoWcZ#NL-9n8ys}#2L za#s_&US#OSXc&fdlTvv}UREfX(j~5P>W}{J4`%y*w`bq)p6A)V-+lJ{^&m}s7D9-C z5U~p(orMyS5yBRddLh!^V&Qyo17FOGM~JAdbK}nqFJyJ7@2J<32kFl|OWqe6f&d7B z00@8p2!H?xfB*=900@AO&?a`!^QSQO1qV>6T9 zXK80R8SG|g%FV_ncJMw|YMjHnUWuK(Lamg&TU_sdf1GgHN$F?&@$H5{=Gu7az|;+z z$g^d1E-lMdx8%i~+u6Ya%r^ARx^EMj(&4Bx_I0~|y8jUN=;;if_Uian9!Qkb3imm2 z1*~;VA^h2Ajmj5A!Fps@F}I_hIW=P6u)ZkEUy|V*GLu>Ez=+70*K)l2;i5^3EjQ6h zdv=f(c5G7YscI8BPS$kHw(<{0F`B;&d=b4{B@4XJ#S`Znlv>P~@0`{h$#m~KKTm2= zbP`HZ?y+9^O!c1FR?X1!7cqStin|BrzM9#ETOL)lUvo;5ztv`24!!r67`YH0cr%A2 z0YS3*^^upKOSuiMslwXZbKM5U8`n@IV^>18Eh!#7@*$F9mx|Sc{3c9i@(wx|a%DL! zZk;*gjx=*dx_R?xw0uwTOXaFh{Q(|2m92IsPZ=r3U1Yw$h+7`wU2IxQrs7WBkRIYE9Ki9Pt&|Q@UED+t9I_Sa9vtc-MJd!5h`DPCO_OjgI2T_* zpTJ%0C8=l;#Hked9{jkw-~H}SK69jT7>GzsWcOL*zztt&)|_T^Gl zbf4V4xLnbSnj$vdn$>$YelHgyfB*srAb7aWI@l7{i(LeZMa^L;wK<5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009IL zKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0;9dy?ix&Hz_6GY>yThJt z?`PkiwJz(JZI|tst(^%01Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY** z5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009IL2tYu419**y6p>23Fv}|C z19hHOr`IVu^()QB{$r|ht6R*95)>rlXzNfJYSd3R1cwc9E-sv3Ug}J7drGV!a4&7;>VI&TIh9FcvIBf z{{2=V_1Pl7+`T9P5u2Dlde_m~S{&OgR6~ z>C}@q5`KU6tw;ARu?Nj++?@B3J8Y}Ji%_4`-9H+W`X+isgbSgOx{B53<#onpzvP|g z_PD%Dgh)~k_n|p`AI>$YFS%FQdU*7Ajv`(6UG)8eVM2JE3*9d|i>&_YLW~!pIH2*R zm&2_V8SNW?L%VC-q!tgD;q+9v++`wIoUqqszLx38oSqq-dBIj|^VrU19M3qHajz;2 z&<+9!AbVriJ23Rp9sLR8k1Mk-J8yS(t02vX4K3pZ+|mW zd{Noh@JB=9n(b%C{S~w0evqq(w0|I@X32UEt>T&c^t z9@>5GS?NnI+ZU2H3(+MhuBE&C5*F776r|R2-s1wgQrD%oT00|p4Q1=POKJ;k@J`Y` zI+GYCt8@l+@b2y$yv4T<-hiqR^j6}aw=j8+gLmJ{MUDBNB_C*5cXf$zVA0>{2@k~8 zyxts_-12kSp-Z{zlm0y-*XrxHzp-GkT>E`=^P5da_eK?-&T5YIHofAR8sZzgl}BXd zp{_&Ka8<@?#S7xKf(GGosL_;YR0})w(<}e4=>jTmF!tv4ieeZg)xXWnZK+g8c2-Al zS2)U3{mUcB;aXop43RRts@t^vZBI%4U#)ROJ$~?rtAFVZvFWf}9#y|`!-MbqusOYL z&8myrEFsH}Hmxg}vU}s0xo5UcDQ~+_@YM47y{j!r1z%nq@?_bRr^~t>DN10~0@?zo zw!tL`Ab^k6aeu1ceqar815L>nuqDndDgryGz0+< z009sH0T2KI5C8!X009sHf&WFo6fNNMIDy~A>v0txg}0hjnYEfNLx2DXfB*=900@8p z2!H?xfB*>m3j!o$BjKMACGmN5Uw$ShSuEuHiX`!fCd1^kE#wVea+Z9~45OG}B$|V< zHKSZfA7e#$zQ|cbg2@VpXNRb^&^asQB98BG5wp4P%CP--&5VCQfF4R)}&M5 z-`sUNQ#YXMQK(Zax3TW%j;9iW;ak?h?^QiE=632XAMvHLV3e?LLuvC%&Hoqi$a+l6|Sk> zRV`{P~Y#AwzOOhYW zSSK>ox(ss@39skq_m{7mwxV=*&Dio2VhX}HraTgJ($Y?fBs?lNfzM4M9pOvT5=ANh z%RdFo2?8Jh0w4eaAOHd&00JNY0w4eaAn@k`OaH=u7R&$wAOHd&00JNY0w4eaAOHd& L00JQJR|S3mRHmK+ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/revoked1.example.org/pwdfile b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.chain.pem b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.chain.pem new file mode 100644 index 000000000..44a69f441 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.chain.pem @@ -0,0 +1,29 @@ +Bag Attributes + friendlyName: revoked1.example.org + localKeyID: CB 4F CF EE 43 43 65 BB 23 74 E0 40 65 36 FE 99 31 DF AB A8 +subject=/CN=revoked1.example.org +issuer=/O=example.org/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZjANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwMloXDTM4MDEwMTEyMzQwMlowHzEdMBsGA1UEAxMUcmV2b2tlZDEuZXhhbXBs +ZS5vcmcwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAtH5k2k62LbnSi/B5Bgxk+zMn +GiOYjeojLffbE73oSIws/sAwigOroZRxeDCK1Bvqlt3CsRlh1j7qGHTdf3JPEQID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm9yZy9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5vcmcvMB8GA1UdEQQYMBaCFHJldm9rZWQxLmV4YW1w +bGUub3JnMA0GCSqGSIb3DQEBBQUAA0EAh2MZRLrAaQlspQCSvzB8GauDjhyc1ZMz +/YeE550dEXzC3YtnTK6PKmDfm0xw/eVcSnwlsYUdLFzB5xBGbkxQbg== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAyWhcNMzgw +MTAxMTIzNDAyWjAzMRQwEgYDVQQKEwtleGFtcGxlLm9yZzEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJ2Y6E5WBXQE +zFsWgxK4JXrpPWGEQZ+KNy3iXgmupAA6Yy0umCLu+eGCekkwZ0WfFhhd+Qy7P+qo +F0mre7VDDHECAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm9yZy9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EATmemAFFWLNA8natXhFyhrDYmTv8X +PEJ3UVt0DmOMxmEBahIeDfplfTfj/NYvy/on7YCZO7F5PwVY2pNJqm8Tmw== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.key b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.key new file mode 100644 index 000000000..cd759c412 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.key @@ -0,0 +1,15 @@ +Bag Attributes + friendlyName: revoked1.example.org + localKeyID: CB 4F CF EE 43 43 65 BB 23 74 E0 40 65 36 FE 99 31 DF AB A8 +Key Attributes: +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBnjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIYvHqW0ndOlQCAggA +MBQGCCqGSIb3DQMHBAgXAj3LlhSYaQSCAVhHtecAjwqd7AvQnGWaErxhdo/AMfio +SWCovkatfN0ExC0Q43QX2P7HKcP6ysQDg+oLHWiIP+2N6lOkQLBxF4KCAfEa9hcR +GJhbBDLiL5mNgfxdPzM+NUfxGainUfwiGFM5ZZg4vZgvP8hMoVeCRJ+sBP4rHzyw +0AdAMzAeJym8MVONUMadr/D7ReMGgxQdGGl/GrrmwOAeJNCh8KJVfI7hQZE0Ell7 +XWWZPl1VafuzErUz0Lm4NdbstlfpVE/ZWWuXCxGgJ5cPyMu5oloHPpPm+x0oR4Ik +NxPkXZ74OZtc58nTgh+SEVe/myWTujMdj9jCxfJknyAlMwZCv/wu/EwcRFopvo16 +zLCsb2x4+sW5Uhduv0mQYEIPBjl+9Eg5eHrX6z+E/AhikE3C7OmQ7MM/8PLPqoUo +xoXYK2O5seWWA5IjCbm7I9mMQpmZi847H9WpHLEaoh8gew== +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..5a1246638bba263f05cd6f461cb0fcd17afd8397 GIT binary patch literal 725 zcmXqLV!Fu1$grS^>6Aee(=j$qZ8k<$R(1nMMwTX~?LeW;291{%niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>BwscBRs;yBE%wK-^|%*wV6Np z)`g-pjZ+P#2E1&XT5TR}-+38<-eq8RWC*d*sr0X-zk&&c?n zg@u`ky}>{X#8(CJc?`JNI3OvFnG@L^khn;F+sl;OD&dr;=QEQ@vA;VjcK6H&!mls1 us~mMNW$grS^X}dua(`GhKZ8k<$R(1nMMwTX~B|xDC295g{niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bwq*Y?2eCCyWp|0KTe!uN>-Zvk=yr7A(!=Q<=1&AAfSZe_@6C)E7 zBQu&!2F5r-P1-;b5^6$_Py+>6W?s62b81nEft)xmQm`3CiSrs;7{Ef&D2kk@Fo;2R z86z+ZycrBUm>e0V2O9HlF#mk+TGzei9e!a}PwsNq35GH{W}gcbDU1Efd!w5#C{FHy z2_<$aga z2I8xN_&f$&Y#fke#mtH94oF<2zU^hoZIy7!)AO0hq}bn`6}x-p1L4;f+EtFa7jiz> n*UsncCOldHUDO*-)hUlRm%Be+@r%)oW2W?#=7k~j(gpqbHp literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.ocsp.req b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..90263fdd86667c58e7f2b2f5ce643aa47b216685 GIT binary patch literal 105 zcmV-v0G9tSXE0?jJ}^8mIxqH2QUEw1QG-gKZ6O0I8wE$(@8c?Z8k<$R(1nMMwTX~T|l9228~x2niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>BwRq3*hm8dpt*)7M&<^VQ45&47+EkZTBvNGXdsX93lobF zi-3JIXQ$O>{^VO1iqbSrHJBRkvT#Kk@}{AHS~o{@Ze<^BP+iz{1ujikt{Ch(UH4BQOlS84Ns_92uqu8uM>3|9tLR*S+Q)eqmNm?sC`( zhB7*4p9>Tzi~Y-cqnj@%PVRx@nkD-G)Yb%kZrs${WH)V=LFS{&9-?eos!Ys`42+Al z3^WY*fF6?NXJq`(!otkN-e4dG;;VxAJO*5B9FWAu%!%v{NL-}8?Pbbsm2k?_^O?z{ z*x#KMyL;vX;nx@1RgStBaz5DC&gbkVJX!x;)EiILDUUaoyFXs>i_<0R-K3LdU(Xzp GI0^t=Vb_5G literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.p12 b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.p12 new file mode 100644 index 0000000000000000000000000000000000000000..c4392fc62f487946080540512b9d53ccb1b7938e GIT binary patch literal 2380 zcmZvdcTm#{632gm5XwpK(#23hNdPH9dJ{#uG$|Uobg2pt2muoiP%$7VNbl`YrAmtm zK`doBFY?<%Q?mzpPSp=E^#E3vcSYcRm>;XH78B~lujRs>_ zC{wPoLaB_^dLw;C^iERA9FyNCLipr(~?k~7(r zkc-npCQLTSe~e*8Ko;iYTB%)fosN$%|Abyva=fZq2 z{gP;y2=oKOsDj-YUL%t)iwTDBN3+`}t_X$OMV0D{3w`gXN=2Fl%;Y)s-d=F3Mjy!H zschz6V;p5{A_e|om#iC;Nx8$~CP}HaHD2e8;f55LbJn6$cL%YCzHD(|FmbA@(~wh7h_4zAWotKwt%>X=9^(}Wmj~ArYZnM>K;hFH$ zdQ5{J2SXn`EJ>fNoNW4+fl=;X9Q-(L$w{SCequ)+8>?IPiSH6zr`uFK5SsrvCM%x` zOk55K2Yi5NAQT8Z&fb6upnRNf04N|B2m^wSYvto!IN*nn{_h~aiU64Jr8Q~C*x08> zI&#UtM}z)Q5)2>Ck!%n_=USU6cMf z#Cwwo?tU&p_0CxKzGc6%0+7m z8u>5-QVjFPm9+BQxA|El{<@Ps0)Z&%4r}=vJ1qml;2K@;LYW|Y2hEOpY6#x3#bn!IM#(S7c8!VdFoj(&5h?TSS za@}5hfU7l0iED~cZclCzN}!HCxT+U7-E*WbR+L!h0vi0FPDXVSQ^VKY2X@Sic@6@# z7m5T`ry{nymogskM{u<^2U(TuCqIjGODUOX{;bECx58kXv*-GNJ=@ooF2rUg77uan zA(Owv%0Kt##OI+ti4|74zJ!HS^eNx(get#va4W=ezJhS(Tj1aAeJfWy=WICPlLf8g z?L1RtAsB5ot*NEWziM&&7lKb6$nn?B3+!DDt z00A0TxN$06sJ|x#EZ4Hk&$}3XiN2(Ir*PFK31i zMO>Y=nd5C4nv6am2n+JCJc%FhAwZOC~))Q4H%lj=%1BB(iXd+b>!;lLG#!cVhR3Q^ktAvYt8;>`ndK(0>s0%mT%rl7iNF$Ii2fEu5O$9l2 zNR#%MO=rtm=bN$J=|`j2+xCYj!aApEWp}BfgQhPcTKSoO@8*FpQ_WkIpBiUqj2lKcN zs0AiBt6sT|R`W!`L>I-ZLU1|0EbmexrG1&W1L>@IY;El_m}M_JsBf?CMaDm$+3yj7 zL`Wf6AxsJ!j0`8405IRi4j&JVEI=Wm5Qd9-7PBYiWDmexOp}*&ND8i{xk`#Y3)|ws Jzn&QY{2kgTP7444 literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.pem b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.pem new file mode 100644 index 000000000..70bea88ca --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: revoked1.example.org + localKeyID: CB 4F CF EE 43 43 65 BB 23 74 E0 40 65 36 FE 99 31 DF AB A8 +subject=/CN=revoked1.example.org +issuer=/O=example.org/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBDCCAa6gAwIBAgIBZjANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwMloXDTM4MDEwMTEyMzQwMlowHzEdMBsGA1UEAxMUcmV2b2tlZDEuZXhhbXBs +ZS5vcmcwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAtH5k2k62LbnSi/B5Bgxk+zMn +GiOYjeojLffbE73oSIws/sAwigOroZRxeDCK1Bvqlt3CsRlh1j7qGHTdf3JPEQID +AQABo4HAMIG9MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm9yZy9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5vcmcvMB8GA1UdEQQYMBaCFHJldm9rZWQxLmV4YW1w +bGUub3JnMA0GCSqGSIb3DQEBBQUAA0EAh2MZRLrAaQlspQCSvzB8GauDjhyc1ZMz +/YeE550dEXzC3YtnTK6PKmDfm0xw/eVcSnwlsYUdLFzB5xBGbkxQbg== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.unlocked.key b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.unlocked.key new file mode 100644 index 000000000..47e917b54 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/revoked1.example.org.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBOQIBAAJBALR+ZNpOti250ovweQYMZPszJxojmI3qIy332xO96EiMLP7AMIoD +q6GUcXgwitQb6pbdwrEZYdY+6hh03X9yTxECAwEAAQJADLoAyHfWVqEMnHtnPSrw +j9nKfwhVgGQq+NnKI7k3QK4rQX1Z+wfSw0rxpE5sFqDUVheeFY/IMolXD32zJwUM +pQIhAOEb6HbVqVqYr5lgN7CoRSVRXJEm1PvxmI6RKewtAPGTAiEAzUMl+oAfRboT +tywwc4N8MdvAAapLnP9u7NmhG7fP80sCIHkXgCdcrCs180/4ODzpZ7i5WagjUXLt +9XjLkdegJd/NAiAweI7bXK4F1S8arkCyxnXpgC8TNZetd1RGcg3tcbaViQIgIDmb +d9wZOnDeMg3BlC5X+zfOyiGk3+/Jnp7Msya+nfc= +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.org/revoked1.example.org/secmod.db b/test/aux-fixed/exim-ca/example.org/revoked1.example.org/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..7621830246eab6a10f87ef26e49dcbb7d9ffe5d6 GIT binary patch literal 16384 zcmeI&JxT*X6u|LkBEdqUjh)DV#dLujV6lje1SJqJur!3hUq% z^aS>zvpW$Df>?zh|AEKMy!m?jt5+Hap@`H(wx2}y-B5N#wp>?+>?{Xvy-L)pzFP8| z?$X<5mn&Pjr;N3?9beDd-{nCB5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 z009IxMW7}xdyD2{bJ5(Cil_qt1Q0*~0R#|0009ILKmdV12sA{=>&g$|U3bd3@X5oA zeqWuXh0W72QN3=bua4Vob)K17V%@HXC`$+N(8PJ5b9jxzcKogu`i|W)l+@wz^d>C!Ljh{D$uL+k7f^_kA9@ zbmgR{b{ggJq=>V$T=Dz^+5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009IL zKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R(znK!1ODm52}#N}aIC3gumG zol;{^6;=C6i^+d@WkzL_MN$0xgdAoIkwGTIlg5DH-md4J3yShx35CVEwm{iWKWhj! z=j6L{oH6NXGAi6+OSIXf&6b!nN+xE9Taw1f+lMl#lcEO52falFd5fCr&Mj~kC0x-ZW|Mu)e@fa*y1TOJ$-Xl9&{?t1Vve{yUNC%{pXbR z*!8%JFTVch2TL4&GaA=qzF!#pW?L7b_0+w0jahq-y&}Sd&`I6%wf^$BV$z=Tf=iY=u!d3kbe^8K1&fN~H(009ILKmY** z5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 z009ILKmY**{#OFG!`TZ&m=?@-Yisb$aJJGRQ{07E?Ons!_ny%0G?IN_)se#wn42$I z3oEZ4Up)Au$*T@!9y3Ok#oNanJ|4JwR?GZrV@iIleL(xbceOSN5Vz5gLp2%lMMF;;upj&`dW!(HRs`q&?@e^h@F zDl1e!ZS2>3$G)mn+P=rT)rJm_K~noU3X-z#+Qd!=f5VBj`wkqMSi523nF-a0vi4Pf z_Tk%K?f=77UpnbkLw(VOQ+0Jw&Jj&>_c#hpzmR=>{mH4nU0fLb)V8x3Q>}09OfU5g z{__2@d~f@qZoDF6^w|f7=ra<8$qXKF6Wb z%|Uph$7kE1LIe;%009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 p009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q6&b@Gs=j*OmYP literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/revoked2.example.org/key3.db b/test/aux-fixed/exim-ca/example.org/revoked2.example.org/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..52cfbc2ab5958e85e041da18a08bfbf1a892eab3 GIT binary patch literal 16384 zcmeI$`%ltQ6aeu11vM*$LO`8Ni_FZ_%$n&en#;tU^Y zw9Pb=eK*25rvHq z!XaePi_j8Xi%by0bVZ-Y_;;h*pIgAs)wwNXpzm|U$tqpdhyIK{=RJ&n-DlqC!axuJ z0T2KI5C8!X009sH0T2KI5cppNjL-~mnm9(RAyyFch#9*40RaLa00JNY0w4eaAOHd& z00JNY0w6Fy0*We&7k!_N<&%rt$5mH`0;?Vt5nVqK=*;yvqvGCDZJ}6P{AGTpllxMLBVzxf~%r zm@AVXl!$StiAW`w5U7Oz<;Mc<2?8Jh0w4eaAOHd&00JNY0wD1B1n`I=;~tg>xlyjp z+yr)vRK#_b$oR-54Lj{(Z}jIg)5X$&9Qm5wSlDJmy-F$-wIrV(9jGfxz+sp{8Wu_I z3=i2n;iO)z>XijHe@oc?J>u2IBsaB=1?`(EmVAzb;1os3ov$~>J_)myJ zs_LS?v}@Z2RfP5LNSN8G=#C@rW|gU5%EChw%3IoJnH#e|G(~lt^Y*J=XBBoVZbLUo zl5GNJl~OR1yB4N z3m)Am>1mqaRwnwL#aBwl1}ZA7*^X0@bz8(kM?=5m_A}L=Vr^JARX)tMm+o#&)XvX; f2223~5C8!X009sH0T2KI5C8!X009vAhXOwV3tWT@ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/revoked2.example.org/pwdfile b/test/aux-fixed/exim-ca/example.org/revoked2.example.org/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/revoked2.example.org/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.chain.pem b/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.chain.pem new file mode 100644 index 000000000..7bc3981d3 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.chain.pem @@ -0,0 +1,29 @@ +Bag Attributes + friendlyName: revoked2.example.org + localKeyID: B9 99 5C A3 65 F8 67 93 A4 96 45 B2 7C B6 64 28 CB 71 1D 6C +subject=/CN=revoked2.example.org +issuer=/O=example.org/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICBTCCAa+gAwIBAgICAMowDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5vcmcxGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDNaFw0zODAxMDExMjM0MDNaMB8xHTAbBgNVBAMTFHJldm9rZWQyLmV4YW1w +bGUub3JnMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANLUlL/Fx0qhl0rhRZ3HTr+d +wbKi0cDyZa97S5EDr3Dq1qurHmEs92C6P27df1r6ltVT7O1xH1+s40hTL5yzQ3sC +AwEAAaOBwDCBvTAOBgNVHQ8BAf8EBAMCBPAwIAYDVR0lAQH/BBYwFAYIKwYBBQUH +AwEGCCsGAQUFBwMCMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwuZXhhbXBs +ZS5vcmcvbGF0ZXN0LmNybDA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAGGGGh0 +dHA6Ly9vc2NwL2V4YW1wbGUub3JnLzAfBgNVHREEGDAWghRyZXZva2VkMi5leGFt +cGxlLm9yZzANBgkqhkiG9w0BAQUFAANBAC0aZSfdH/PlvY+jfQnVAkmmYyawPdSu +Osv4lwZYhBo2FSJdlufbwo3ElD4JK/BIHHTGiphM9++hpGLWaAcvT4k= +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAyWhcNMzgw +MTAxMTIzNDAyWjAzMRQwEgYDVQQKEwtleGFtcGxlLm9yZzEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJ2Y6E5WBXQE +zFsWgxK4JXrpPWGEQZ+KNy3iXgmupAA6Yy0umCLu+eGCekkwZ0WfFhhd+Qy7P+qo +F0mre7VDDHECAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm9yZy9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EATmemAFFWLNA8natXhFyhrDYmTv8X +PEJ3UVt0DmOMxmEBahIeDfplfTfj/NYvy/on7YCZO7F5PwVY2pNJqm8Tmw== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.key b/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.key new file mode 100644 index 000000000..3c2d61283 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.key @@ -0,0 +1,15 @@ +Bag Attributes + friendlyName: revoked2.example.org + localKeyID: B9 99 5C A3 65 F8 67 93 A4 96 45 B2 7C B6 64 28 CB 71 1D 6C +Key Attributes: +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIatK6XJ1l+7MCAggA +MBQGCCqGSIb3DQMHBAjUZXz3pKENmgSCAWDbQs9Kd21OIstOoQdgYviX33loF2bH +wpn0IP4P/2dFUmK07M146AEwPgXTI/mCewMgJ/cRQqnFAyoE1hjbZnk3WRi2SRXs +dmIWAveseDuDsL7og72bHSvHIqsvcYs9SS8KBPCH6wY14a40QO1X26t7S8ZLTspu +4V/YSNNiug6n8Z3N1Y2tuWPC8CQ9bBtL2jcqZT0WBJ8BXtn69jmVSWNm1DBaByET +M4dqHGC//hFk1jnKBXaJ/VvBS5E6lOANwfUAr0gQT08NaJ7qJ6WUhpca7Rtky/KQ +/passZZKeu7/R8VyQLvfk+vH2wW+5EX8+WtutWQJycW57+pnoXORrvIz3lc6B/6+ +Q91EJzABv5n93nynoZgEEr4vKiCCmLGYYJEciqQTERzCDNw3P73R+sd9PiTrku9g +pKp12ieWWHZjeHcAMUZl8xWSytVT1fkeSPXcA43KoW93s78DegMh/HTr +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..00a0d1c151be4fada652721f65e71e764f39e081 GIT binary patch literal 726 zcmXqLV!Fh|$grS^>9j!;({VOVZ8k<$R(1nMMwTX~9YCQi291{&niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bwo z`kZfB8s@)M`E9_<#;Mij(e|B}5$InAW=96k1*!5XzDJ+r=p?eB+4j(?uVmADx-g_WHzvCdLkfCdL*Z zZUADf1SYiwZv z3t6Kma-zo|2H9ndz%cM;Fz{e^SNtX_nLS3g;_nh%V8%N%IKJVE>NT_ z_Al>^ZoZ&6xd)DGmgxUeTNC)XaZ_)T-LzQ-nU5}eh_Y#^GBGnUFfP_I&@kWwdPtU^ zk?}tZ3o{dYgMk=`uL|Px7;v$1K$03WC$c*ragqAAmnpYZ!YNPBXC{+ke|J{w?wJpS xUteffIqF`>`Cwl=pR=3rWc_zhZ#-3}JlYNPM55AlTMm_J#$FnC;(^l)*}D_ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.ocsp.good.resp b/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.ocsp.good.resp new file mode 100644 index 0000000000000000000000000000000000000000..3e2585aa86e3cac9c6aebef7928619b332928492 GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXQVzKDAK<3O=!`UFl^#dXtrGFIrxvWWaEiwU~Z zEu(>2P)bEvAK&hBqZ2`Ai)L-vCO=51?SYF5(7DLUZij{iW28FwlIJNqfrz&abXaH z>@r4R7^#7@?3H;o+skg~)+AM?2N0&WB*|b!dm>C%u7i$@481Ml-B+Jjp_@9M^nTfr@ zKn%oJ1@U57>X*&UF$NPXMOl-nxdl&9x2lS#3^J1chg%m>1+FSM&1buZ+6 ou&Io`%&H>3IG5A literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.org/revoked2.example.org/revoked2.example.org.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..3e2585aa86e3cac9c6aebef7928619b332928492 GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXQVzKDAK<3O=!`UFl^#dXtrGFIrxvWWaEiwU~Z zEu(>2P)bEvAK&hBqZ2`Ai)L-vCO=51?SYF5(7DLUZij{iW28FwlIJNqfrz&abXaH z>@r4R7^#7@?3H;o+skg~)+AM?2N0&WB*|b!dm>C%u7i$@481Ml-B+Jjp_@9M^nTfr@ zKn%oJ1@U57>X*&UF$NPXMOl-nxdl&9x2lS#3^J1chg%m>1+FSM&1buZ+6 ou&el7`B@T{{gE4MwtrWHcH|Mq~*| z*<}k!SsIE^c3sQhTCV%9_kEuC{Bh2CzUMjTpYwU1FPaJlLC{nk9|UGaf$r>zacD(2|G(wkvq-4$*%KJnb<3!i zErq{w_k~=Q27~!}piv;lXP4&#bz&mulWC3>DnMuII1Ts8e>E^8MKZ|MQec83(&Xei z*E?LMn4{IP@vc~b@6!R9K>^0PN|^Z>pU}usrXfp5Q-jDX;QN^iOUfP|z}yriiWjfj ze^fAEC{2rzpN_SoU$SS=2Cw>0mXWV-DxD;e@6u3oEivb$1wCfL7Da&CVYN6cyXx1I zFub~Rg!$^@-78%1z&(uHJ!P)?rlvg(mNWH-@?pKpj~|nSO+50e4R8aq$c+`q*o)c= z*=IUF`^a4}&wAiYU--iEpX{WO4?l)H0ta!7^^turoq3rySs{QZh=V>VL8|c(m zA@THuZ+X!I-x~SKA}#k6=L9=V`Z&)QhOyy$>NB9oN|rjXt>Q9JFKtJji8OD!C)hhW zDWFQi{EEi^=cx!$jEbxh;0rhd0e~0awp%HH2B5ZEgMcf52jC63@AhiDGhg5u8ui~r zF$@wa`trU#+j;F;N^TmVG^~Q6)ZruJ4*VnjP6(W}3k(kIhUbvj;Ye>w()}7A{h26-bYxg?Z^jp9eeDNH~wr>-^b_#tbd;CJgcB+|YJr zV_V8xG~|~XT*;BlhB}#u6H)aJTkAUSH8BIf7#IIS>lR1zyz_M*$*pQ=UK}}9;#{Y; z6z<$=z{Gy}cy7a>$3e_#*gdU>GQZtmmSm)nXY{kbjfeS+ynIJr+~gdh;%_ z4ea4l(TK=78a%lZq_~tSQ4bEG;7E|lqlDM1wKo>M#O)&WTO{ZhxwcXD+@aLpYAY_{ znLp76*EV$M~~UQ0&`nk$&03CmqW zf{2%5rD^3s1u?w{jyN&e?)e#a=eI}lT^cq_XvcEKPsLy3OLdap+Pu`HlBjfuR`!QI zj3FOX1%4Wk=|#CFS+RGv!l}Yne;U`ri6JYym10mx%Psjt_^hnokJ~hs+{s+cNQ6>I zhh(Vj(K(g=uZX+}&kdn0;#;CrtYK(9vd_^tv^HZt5+!@<{X`A@i#wo7mycUrn*l%6 z>s_$Cb1!wsw@mYN>lib3(Qec2j~z+UR9E=x6W9Z3Is9BDt@ai%A?-V|Ew#b(j(n)6 zak3M(QlDoYPr#_;QRE3(dAhgK!#79FB5l~Q*4E`i-1aP(Z|?3>9zH?_lP9Q$c3HAhf zN_^*b3WAEey%&=Hn|f0*3wGju)ieL1xOUw~hKv5+b6_LO0b)i=&KBIwU{rNce+jP? zoh_pU_1H2?Ft7PRdH3>w9z$4d;6nzXv+a7T@p2I}vdCyCRONxim)BChp1wS*dn?0O z34)`m5GB-WS?$UFThXr)Ec|IK+wM4hC1NY)J%2p-*p-A9asN#nwoorZQ`o) zfOiZH-Zv#Z?$AdUd;duz{Ih!8^!&RX#E7DwkZ(Ww!_@Lxn+HO-Icy1pv2M(W6r6r}6u> zK79Y)?e!IYyb$rgjnChKBuyU~?UwUN##K)myMwm_tUIg?s;nzCTIC*bW7pIXsfjYi z<}5d@=d%OD!xud6ux}CkBt`wGnR*5-Foo*mU_%!jY`3PEhC*eXNNJnHJCVXwwb$?H z&dDD6<@+lPMCt06}IqW3)Byf#3 zGi(Vuq(y&fqS;lkzpTa4c``b9QDRUUr)5LSSe5G{ zK9zaog(s9$%unKsbkt%iBgKoyD?j9A-fXzWmZ>VVvG8QYQ1_Z9=Fc!1 zT%_79gnoX?dVP9RIM!{nh_z!?qdMDAfL}@p#}~yFviev)4QIO}!6kd1#v_dPbfhD2n8IzYH$dx;5n> z&npW{^7~3EC1&M1wTTO1GYhNlK%x$%er+1mP%_!K124+`D)csn?OIKBunYNpB($&j zWD0(-+JL%)_pQg>HnBeqTs!m#eaeu7lo_Ou?y%f)j!S2UZOUcTg~OAAL2H72!Ms{d zf>$+CMc6&ebWASX9daS7{?{%%^rwUB`kY=W!~VD_Jek_lTT&nkVRO4bU$!{XH~3A$ z74VxdG_w{#wdm-3e8TaX-CVSZX8j)E7~FT4-~7Jg#1S1}g|j0f-P3$eK2{FkXKz6F zIL0s(x{i+|{?p9kW(EL%0tYE9Ki9Pt&|Q@UED+t9BwPrJvh`wic+XA5OdcOnkFGlr4BxZyN}>gI2T_* zpTJ%8l2o(^;#7)!4}RR;@BaPrnInyTUqosm+fO2UZYVn)Zfo;zh+RLO&j z!9bnGxy@ofQvF_cppH5nb)J}6WZkZZAc=?J$b^}vGkcwktvPPnxj#uG+fK5PR)Nj( zerAW^+|yc(?akL@YJ*8)JYDr|bEVZV@<&ro%~Ip%w!Bp@C*75MstvvGw^gao-S>Iq z(v=gR+G&u5X&xqVu~Pkqe_ucGT=j=8ezf1d`0bsB00IagfB*srAbm$ E16mGD8vp0rr*med*3_H@I~Swp;V{9DAs=wQWZ~-`b$HZd*@@5M#fpXz5jb zYb?e!#`?q;YhXN2{Jz`}0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{ z1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_Kd$0ZOdnw)<*4>_wH zK1ZHoqNBg#M#kEV1sV0}E7I%JTUZc4009ILKmY**5I_I{1Q0*~0R#|0009ILKmY** z5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5C|$@yyLk>#E2MW zyRgX$WsAN}snt|P)xXka={>A+Qe~4(QOsr`huR}$xJ7%_6cW+L{kCgCNufKXxYT10 zll_cVEy9{#Sdj0E&(4x@(KdUU-7f9+w2`A^+N@~X$Z_()p&Z#sS5M0Ufv&;>T}>_U z6crSC;BCQFtlvIkdEUkyV-j;)qBCAxG-bB8Z~n?-F6E8zINLq< z(y>?nIhT6!Uee8XKOO(&VyAiLh1EIRiX+ywcM>XcB1#B@v|ye-UtV{7 z)?42B#ia$_#X=0%Pj{m`tsB=`_1Bo|Y@JN~|D#9^K18FNco}DZMh*CPzKcAGzYLX{Qp38XKx_daIj%&<-z3IAT9px6ORME^NrY zC4mt49hSa>9fRETr;IlOI>89?C>d$7CR_A}y_cr^x2N_f##bx;=sqG&b8E1?o%oHvAR|K2YhvrCskdl5mdrZyQ)9Bl``t11TsNJR$4d!_l zr!C7oH1M5e*Qz!gxpeQ8XNx~Pv0wT7=Qi1=s-ab`%{LN1+v~5(UR#y)O0Y0d+&!9n zt6n@{y1TTjptwj_#bxJ*&T{7jXNdD?=99FMEI0R13<00IagfB*srAb0lF+N@#r-MI?uRYb>jF_R{yQk z;>x?H7Y*L?@~UrhPMTtuCOgI*KOOdQUdz13F=c=3dLj0={odRVWm=Dsj;s5ke%GWQ{lBK{kePj6kJYv=X}EO3=4;Y^x;y`?lwmcuYcm_egO^TFx>MRA zP$|MDM2BJ%MuCX#)SJ+HmP@bKco^NIU#cBO8~6{ALIlh67h{CzS*pL*Rr!hLpw(7r zL;wK<5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~ h0R#|0009ILKmY**5I_I{1Q0*~0R#|00D&hd@Gr;HbKd{} literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/server1.example.org/key3.db b/test/aux-fixed/exim-ca/example.org/server1.example.org/key3.db new file mode 100644 index 0000000000000000000000000000000000000000..db816ef714c68eb7970f29834cef505cb925a8b0 GIT binary patch literal 16384 zcmeI$Ye>^k6aer$|C?GlmS*UPvKG~}T$+z8(1n>=sboG+GU@5*IHNrzn1DA8S_rf{+xSuXE+=wHD z3=ksrBD8+7L?#Fk7L$G<}J zbxeF}Kvrv|22(w)3y~(ty_8M;lBrg&LF7`g%c|p+$|{U`L^E6~tWCI?I-k+AZ75Rs zBcN+1m&B@(sz@De`DqSe!7oKuRlBXIhkQyrJ0EU)@L?$C^1}Dl_&NVFzgKjf81MBM zJw6wx)@CNY5ILXJSUU04_%ZKq?}~W7l1cw!W=iPK4d=7JOuc5fah_ivbv3&yQ84j4 z($0?s5%m|hhkU082X*r{`E9zEo*3%B@94~kr;||YWjUVHw1@8zNpmzUq)phR4dU7E zl>PZ4?>kjB6C=RJ+Zi)fi25o@d5tlK?ju7~Q}3M;B}w+2?_k*(;# z30f+(A^BK8sVFC?ufM}V6esi1{Te!vAAN95%K<~{K>F8)d-AMv5%bq_hx-SJ2TR;F zW}gg;EwZJd^^y187_BsUOKkP#fn=M3)6YH|SSQM&6=j@hxj~*s7)EWH%*3~-vF;tb z=?2+koJ`k+sl+>)?K_LhN$-nI>5n8|LR>CQNM_4#}LiGzS3?009sH V0T2KI5C8!X009sH0T5UYf!_dyp??4X literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/server1.example.org/pwdfile b/test/aux-fixed/exim-ca/example.org/server1.example.org/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/server1.example.org/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.org/server1.example.org/secmod.db b/test/aux-fixed/exim-ca/example.org/server1.example.org/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..ac46b4820fd83c543306507e0c2634fb4576ea23 GIT binary patch literal 16384 zcmeI&O-jQ+6u|LkE2RsmZrq6sxX7;10|Xa!BSk6H3&dnvLer#7QmG4%;oci~4A=Dv zdI1k0b|$H45yVv~@*jB2*PEG_-#XGb3`C?RvimG@V283NvST|J(p(Mfez{OD`*N#F zx=-(3?3!yX$Hm55v#Mv~@A4o52q1s}0tg_000IagfB*srAbLQC~iMCmfVU`Z#Q4|~B%eA@DrqkB*U@}c~J2N9sh1wK- zqlfX__dGS$w_lT7hm$OF=Um^8u01tOf>G|P*)$3YU0&*~Cf&7rs)XM6+p4A5-uHRr zDjVzcOy{AAr$wBlZm0SW|Dk^B+v1OH{Aj;@@cRc10R#|0009ILKmY**5I_I{1pd3g E5|`6U!T +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIhfu7ElRn7TUCAggA +MBQGCCqGSIb3DQMHBAggde7b8jzc2ASCAWCNar4Td+ZM5Elbb16QeDTfzMoKoScb +jQo/GS7f5h4An9vh/aTaKBoWDQ8gLcvbTUlpGxRznGt9mmOk9AOWsd03rTJ3TUud ++Cm4GfyEslvF8zXSPgJOz4YMiMMNZF3sEGGxs+D6Dav7isMrAIE/Se4Uh3pBY3Fg +kio9fZfJSWorb3XO6LY9wyg33sz0ZxfhLfhenpeuveQfGuwc9l/DtYuhorqa4xXv ++T5W6HQ7g7nB/GMQF0rkm7BUSqawuLPK7ippBjpNg07iGOYNvQ5GKPahuBTbKyDc +7LYzGNjZ+mNyL8vDNkwcdnUUqIbYsdMqmEZX+cu2wugXF1GshI9krcDHBXGcZH4G +sogntcL8qR5KpPfBQCcp9An7TfLJkJtZOH6IYVZVy3/wb+OEou3UNckMe7PF8PWa +T6/N9/zs49U6RxiYn+Vz/x0hQmRbLvLEsbotT1WStJq8LkcI0Zu9cJab +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..43bb173cc9627733e5d4af30200bb759f7e70020 GIT binary patch literal 725 zcmXqLV!Fu1$grS^>6Aee(=j$qZ8k<$R(1nMMwTX~?LeW;291{%niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>BwscBRs;yBE%xVp5rm+*WOIQ z%ElYtUg&hX8}PDmYPET^edlEadY6IOk-=14mD&5*kNuKOlQ$R?ygK4DD@$2^Ynj8& z&YyhMH7j4L&fKDOzgl_ai2&xQCx0)fI62eR%HaOjFJ*78N~}`8v35ZdV~0T#V+#;B z0I}8rW+p}^CPrp7n+%L`1f;ZqBqSh(AOQ&q!_2&N1?SYF5(7DLUZjvTiW28FwlIJN ztWgv>v11T}>@r4R7^#7@?3H;o+skg~)+AM?2N0&WB*|b!dm>C%u7i$@481Ml-B+Jjp z_@9M^nTfr@Kn%oJ1@U1+ wFSM&1buZ+6u&W$grS^X}dua(`GhKZ8k<$R(1nMMwTX~B|xDC295g{niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>BwVQ-){3y7IE1v zT+^c!`Qg&4wnov{ri-jHA6(Izn#^LrbTnkXe*7t8U~n;Z7&I}q0C58lYb{`AVq{`s zWJa^ez!*oUNgGH)LQMz~YM=ni%u82rPAw`ikQ3)c3O1uCab9B!16U{;MUfK~1~JGk zV+4kQH-mu(lOx0QKx6(5=AX}9>$=yx!!OM0$z2XR!B9rW>~n!4WwC#GZ*=no#mPNz zT(d;~pW2$h&yAaUo9w2|GRS;%*+Y~~OO=V4k%4ismVt%=AJ9Xx{EUqMSy-5v*c%MQ zKzvmYpT~fUjRTUbm^qQ%0f~#$x4lfctrAXodOkCm6#KigVt3DcApH75yUJ1bLe2;K m+WDN_geU92i+ba!I_2@^a`(q8esQ{Fy_?CY6B5=Q|TMbSzC literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.ocsp.req b/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.ocsp.req new file mode 100644 index 0000000000000000000000000000000000000000..6ec207d4fdd3af62276ef3096bee10ea650b9b9d GIT binary patch literal 105 zcmV-v0G9tSXE0?jJ}^8mIxqBBQPN_9|j341_1>H2QUEw1QG-g2W&{3`n_op Ld4bsW=q!mxGXo!L literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..90cd6fad1b1d68793bee741d5024e346de015d2f GIT binary patch literal 728 zcmXqLV!Fb`$grS^>8wE$(@8c?Z8k<$R(1nMMwTX~T|l9228~x2niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>BwbTIyi%)Lao9;FFcGd#RUj{B{ zV(c(zVr&881|Zg2z|6$R#Kg#qW|M(2jpo0!7MV|MK4G<_n6Gd*HZciT*#eHG!WSH}y8zO`Bzq`RKBTD4Uil6EhI%Rsvtg(0T&wwB(X7bBD(_;7pZT1nQ~htobvR1W-=-E zcW1@!p7}ud^@Vnoqwa;A5B9b5IlBo@)_)iE##4357?1$GlwLO F0st8I(}4g0 literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.p12 b/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.p12 new file mode 100644 index 0000000000000000000000000000000000000000..585738ec8e43f55360b0b4ab20c6f95bc4cb3c7c GIT binary patch literal 2378 zcmZvdXH*l44#(TlmRYtkEPK~d$_3dVOD!S@w8&5p1es-TS!E+zurdTGf`EuZ8B#z+ zrYsq`1%Vhxz_CDwI~|-(>>zz(%LBo%y;vLJ2$OzsdPGSg8!Xu8wJeiE|5=WwOH;my z*~-!%6EzTy=m2^hm$I=mMu@U`YVPP_eJ4vcSKe*yz^!h@)kisUd|i0|;v$VqVd)ja ztW>0pEwheRQ!ngQpp;#SNl2wXy*USMS{{^%LCi;Bnzf&7sA6A}Imwm$10k&=8qPty zux}0X{x;2S{C~g{I}4`U(+G72^yJOE&fP8FHf?~B4$B*|J{m7h))_l%s8kiL>+m5; z)DO{Vljp-r9>~aIOVc@fW8fGHTj?XKdY!ejQSrKF*G!9bERn!aRr_fPb@^rK8}isD z;{t~S%;n7~tK?NOsd260@uEis{zo)?x2=6oQ^s7xvTXI|3d}@jtboceQAFE_(2zIF zk-Ubr(Pq-DyOCT7cr5}nm9?S?06VRC z4SnW6OJ(L&logf+1ORRV`~ks#dqn{1IEDfo0bT%K0RA{f0ep_Du4sw>ww+Ks3Fftr zj!RJ7=$}buL|PMns+_#J)0z(W+kWQ*N;<{`1O)u90sjXF=r0^jAk>lKwxSvZO7PLG zHoEFB97xBwLER7oLL-=zfzvR4ak~;C$}G?$0Cg;=s$!%Y{b; z2(UzNHAH*c(=h+gb$9WHorU6ct68gY*?Lz`7T%-}%&8jI`PGymdX?Xy<+Cm&f!r%n zqdRAk@DHfIcj9V$RPQ3vH{}V#mis81D+ikHk+8j1QF^y4JA9rv>dX6*BTecRy5s6M zPlCH~eojlgSig*~x>sf7iW>MU!d3TdDyx?#;(3Kw6E=pgvyDFwV=1tiaKj#={+4+* z#gM8U@=3~wF(XpFKcqhH7UMY!E;Py|xn>z_Jra96&twgKN$y_x)g+PU%jfJE=NOIj zUdTc0sBQ4Hu9b2Rpl>+~g<4*uHArJI6mE~&L|!e5cz=|KTLUk$PSf0D)Pq!suTEX= z%+?}2JnD<6@*<5Nm9<2t+nNYSd-ML7fBe3sY?goC|A32a8+B=COhlANG{^0ad5m_3>nU50i^gxn-zANglqDAUn^;mHxOE<9 zKPw{X?5x4k7RLAR65C*O7p3bT@(QSnVaqjQ#@{&J)HMl8tgx_pZq>u$_}`#wmu+O zd+lv4ohJ5YPQSEUg@XRAchB&_DK(9p3Vy;j8W*V6tyNY$B_2YI0dOgL+oGKtVAy8R_sW3-60y5|1MbKtD-- zbvr&qD>%qRv>l>IGJ_i%1a#NTjMtcjXT;SE_-KDloLACcW2mL&3_MyBK{hyIc$Rz; zt*@8h9T#m*4=->Q+>-B~VMiyhL6M}wo0-M$`Q)m+20BNdJ*TZ%Qt(1&%DS7+>)FUt zUsDzwK8Lk7PYToat9QR19kveHzV)5uuRfBjB`RdK?3?lgKqBOLd#x@k7>0A8zr2v9 zeuL%NGm5*RD>S%3DhrIgoZh>|-sbsj>x^8E6hC7(EXJ%A~E z(NmtVpu0Rtpy^jF8ItMf1Ce??wp z*(}aFOG^x9{o_&tb70-~k7I0vmp;u;lJI^y_HfSZ%J{;tw^E5}JrY=AJXfUCxg=>F z?>W|^rHWQILtWFu^?H*)&8%4)A%mtlZ-2BCT)(rgse39sB#SKdoHqM01lPQr)c4Lw zWYsn|if?Sfl9&7B&&{z&(O!9Ei>3;QOGSo7W&tr>kH1!?%+ui^v=yWjF&$zR%@#+&64E-T z`7W*n>=u(>aVYiWmMC7R2lPsr+ci{^NH@QiZ_w;1_Z25a8qC&vqY#3J%}JJCZtv8J z3X6G~wajO}QB>X_{^R=rXypY1mzi(A{rzDDvFmEaOVst^)u7i%9~PouhD-eW*0OZ0 zg$E=d;?5#$<2%%4m$bJ_Zi)+<9ax8>){q-a5to$p26N}Sz)Ysj!aXLl!1MonV!wN| zI$8|P427I#X8;L80ASwtS@8;(I^SURW));prH@CP*Et-RQ+2rU6t#Xb&6NH|UGG~W K&#xy20Q>{$v_e(@ literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.pem b/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.pem new file mode 100644 index 000000000..81679f826 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: server1.example.org + localKeyID: 5E 7F 83 85 31 F1 CA DC 88 07 2C 58 95 FA 36 16 65 F6 BB 8D +subject=/CN=server1.example.org +issuer=/O=example.org/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAjCCAaygAwIBAgIBZTANBgkqhkiG9w0BAQUFADAzMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzEbMBkGA1UEAxMSY2xpY2EgU2lnbmluZyBDZXJ0MB4XDTEyMTEwMTEy +MzQwMloXDTM4MDEwMTEyMzQwMlowHjEcMBoGA1UEAxMTc2VydmVyMS5leGFtcGxl +Lm9yZzBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDFIpfEcK4d3IEq3F7B6AIpepZk +mKln9pcCm0RbAxm77YlhHucDzyVu9rmW7XSW/c4Dv3clwzHLpaoF2KURKLZ7AgMB +AAGjgb8wgbwwDgYDVR0PAQH/BAQDAgTwMCAGA1UdJQEB/wQWMBQGCCsGAQUFBwMB +BggrBgEFBQcDAjAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLmV4YW1wbGUu +b3JnL2xhdGVzdC5jcmwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRw +Oi8vb3NjcC9leGFtcGxlLm9yZy8wHgYDVR0RBBcwFYITc2VydmVyMS5leGFtcGxl +Lm9yZzANBgkqhkiG9w0BAQUFAANBACfk1MYCSbT2gbaT1Dv9FrMEybkFZtxUfz69 +Gnx/55Wfw936z2en+RImD3qF1qQxUwIMlWGm6SaitfmlQ5qVJ1A= +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.unlocked.key b/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.unlocked.key new file mode 100644 index 000000000..1b83abc63 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/server1.example.org/server1.example.org.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBPQIBAAJBAMUil8Rwrh3cgSrcXsHoAil6lmSYqWf2lwKbRFsDGbvtiWEe5wPP +JW72uZbtdJb9zgO/dyXDMculqgXYpREotnsCAwEAAQJBAKDzsX4NkduHoV5hNmyT +BNDg6dGQYyAi0QCrzI+SZHxt8ZYksM//or03aXE7xUUAeFmlSQYc9KfhADAB+mL8 +3YECIQDi4Q5nPCDr99odHTguDlTDi9vEEIiY2N7g8jsGAZH6KwIhAN5wME90eCX/ +oIzlAVqCbq9JuO8Zt3lxvqbasOGT3pzxAiEAwXcifhvDAxUGNF9vQa7Mzzca/vUO +VjBQ1kcY18VNAqMCIQCxMe/aK67WnldYRcmZP1RLANB4cCUPcoPsyUOkvzXUEQIh +AJEKAaavDZzn70+xnPw/8QPzHExNxIRtYrxBnc0Kv74r +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.org/server2.example.org/ca_chain.pem b/test/aux-fixed/exim-ca/example.org/server2.example.org/ca_chain.pem new file mode 100644 index 000000000..35a92fb61 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/server2.example.org/ca_chain.pem @@ -0,0 +1,47 @@ +Bag Attributes + friendlyName: Signing Cert +subject=/O=example.org/CN=clica Signing Cert +issuer=/O=example.org/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAyWhcNMzgw +MTAxMTIzNDAyWjAzMRQwEgYDVQQKEwtleGFtcGxlLm9yZzEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJ2Y6E5WBXQE +zFsWgxK4JXrpPWGEQZ+KNy3iXgmupAA6Yy0umCLu+eGCekkwZ0WfFhhd+Qy7P+qo +F0mre7VDDHECAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm9yZy9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EATmemAFFWLNA8natXhFyhrDYmTv8X +PEJ3UVt0DmOMxmEBahIeDfplfTfj/NYvy/on7YCZO7F5PwVY2pNJqm8Tmw== +-----END CERTIFICATE----- +Bag Attributes + friendlyName: Certificate Authority +subject=/O=example.org/CN=clica CA +issuer=/O=example.org/CN=clica CA +-----BEGIN CERTIFICATE----- +MIIBaTCCAROgAwIBAgIBATANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAyWhcNMzgw +MTAxMTIzNDAyWjApMRQwEgYDVQQKEwtleGFtcGxlLm9yZzERMA8GA1UEAxMIY2xp +Y2EgQ0EwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAxY7JyBAI+e4vb4bz0HcjtE+O +x0nLBB19Kz04yNARj1z/ZvY2c+uvOR3muHROCgFUQxGobP3n2HaTS/cmv2SVPwID +AQABoyYwJDASBgNVHRMBAf8ECDAGAQH/AgEBMA4GA1UdDwEB/wQEAwIBBjANBgkq +hkiG9w0BAQUFAANBAJLhs/m5Jx4oV++aylcAvIHa0vHSK4eh3zX1HqWwqK9I0/nl +LqwwPgtgHQOpe7nd2g2B9wPZ82i6LiqY76A+9hI= +-----END CERTIFICATE----- +Bag Attributes + friendlyName: server2.example.org + localKeyID: 86 3E B2 BF BC 60 4F 3F C4 EA AA FE 97 44 A9 48 6B 4F C1 77 +subject=/CN=server2.example.org +issuer=/O=example.org/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAzCCAa2gAwIBAgICAMkwDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5vcmcxGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDNaFw0zODAxMDExMjM0MDNaMB4xHDAaBgNVBAMTE3NlcnZlcjIuZXhhbXBs +ZS5vcmcwXDANBgkqhkiG9w0BAQEFAANLADBIAkEA1bNd+LEj7UV8Riahrn/3TL1n +NwaIvqkqCFscP5ae3dB5rJ8vdfIc0hOzh782zpXxJxYa7S340zjxfgdUzMAeWQID +AQABo4G/MIG8MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm9yZy9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5vcmcvMB4GA1UdEQQXMBWCE3NlcnZlcjIuZXhhbXBs +ZS5vcmcwDQYJKoZIhvcNAQEFBQADQQBCORy4CO4MMENsEtYwU7xE0Ck5i8VefJ6D +txODMnRUzsthdbfjgXm3BfVPrhOuT0/bIKfyJtoSdCtN1SRPTJxO +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.org/server2.example.org/cert8.db b/test/aux-fixed/exim-ca/example.org/server2.example.org/cert8.db new file mode 100644 index 0000000000000000000000000000000000000000..2f8358eea7b0c821176b9f1a5b7414cfe15a3493 GIT binary patch literal 65536 zcmeI*e@xV69KiACdv~0tavB^0DG;TCigM3^f)eM6M1yHCr}qt3ZdX znr)eleyF&9h-sL!CKhG?XqwJ3Ojk75%=Oc$sVU-e^n5u@uwx2yZn^jO?%DU}J>Td1 zdY;ey_k6y>+|Mn9FbH946k?p(6n%uy)JiYHa(zRcZ#!UYTeqDOz4Yz%MJrCJwZ7=r z=;fX-7Jqy0`F*(|0tg_000IagfB*srAbz70p#5QbcOogjH5( zTU41;Z8T^G^_5n0&ta9>mCaU73kni)s3S~;gAkTQu0WdG&91QJX+q|mC2n{H9$V-uPW4E)#L(iQ9+S6 zHq%q$le615NDC6i2|{KYGQ@_e-*Tr0`Ammrg|7;&8@%*)r+anArk7Gj{4}>`?Rz3E ze?(%{BWGJqRxHht-mFdGk#kytKX?666OprR*{7Mo&l-%H(B7RXr^`O-=FxpMt<_{w z2IjV>jkf9g7HL*1gC=B>e$7Ls1UXd3R}ZcpSo!dLpKoEB-JV}knAncRUg-9DN_~my zaQk*ENMnY`^?o2GOlzG2(6)w4HmPl?NIjYuEAWYR2OpZr($yR~ORW2{#_D^gGW zecXQNYW$fO-h6atnJZ{|)4H4wi*0YWcM+Q&*I2p2*pEtseJ%jb#BSmc{u zTvFgG6JoeJ-G%CmUAWew-a@X}I_diVjv_IXgWVcm zMj7LXlKuVT&laF^Jy^!+A43ljCMyg^6)Ye5gTUA}SEZriFP-;^VV+>3UfDlgj|bSbaaR-2diL+q9daZRDV zgeQ&-%A5F3Zh&E;!mE1&(4vO!R8L81L2;3=h|{k9t~%FBSGLRGIyN@TX?JEh?^bpJ z>OlYj1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY**5I_I{1Q0*~0R#|0 z009ILKmY**5I_I{1Q0*~0R#|0009KU_Dqv?-Y(HHFuH{ciEP3C(ePpI-0sPuN$}<^$xg&^k`xS9vZvrY=y^;$J(tt7T7o z%#dm4-uh;ms4s77Jl~kGX7i7uF2%h6am|kGqb)xtZkJ%umhh)}unN&3*M**+qATexjNM8Fp=YWX)vaF|Ir902g==g!->T{D5bzg;H|rkN)ltX8V4(XW#Fh=h?pBefIqIAhk^#gpdkC z#7=}ZESE?dA#6D*7t;7!ET6Az5LWWa5h5z<%&@bg%UK!9JIb}{q48&)RqqQ8K>!3m z00ck)1V8`;KmY_l00cl_y$EQa1@b)kGx-s@l$=fWCQC^h9e9Y@L0Hrk1P_gR10G@EoPE)(i{oXR>cSw`b1qh z=N;FIU1Q+DQgrFH(Kat#D~M3RFk&Kh>bByG-q&WyF#Cg~>hMC)XfpBErMfbEL&omK z-X)v#$mi6=ECqAHelUPknb6|rl+k>$9>0s{mfG20b$sii*tunjMeM0Bj-q6Z+@o`M z#G8&(Q?m3`j!rH;3r+Ym@POuJDQ~|K6m`VZ@Och1_T?+Ndw8zfZnrBn#c^WKMq0_J zZ^=-jtA6b4>|@i{{^ph+SlsL8RX2vO=T8)jIWc-9y5FA}@Mpqhf{%G}x*v_M$J{U^ zp}NQeTM6H$YiC2)Y)upO@?XW(vwL=p)9~!$j5h%?bq1wqs>MjBm?piM!lvT>we+Om zl!(?_qSs9Xz5*Ko}@G0U-s!?$K;*#`-aFxC@t+9soGdb37PcfyIbg3 zkF}IL@W*_c4$gPW{N^hSC!FFB85Ky+&$-s|E!9%$OPCry2K%$}hC0ra<(o^U4LT{Z z_D&gBTq#2i5+ zK^GHpe1F);pK1@<#@YVjxU}__clD!xUqH#}_`)$#m3YReFX+7;eIlGA7DwZvK(m0; zyns-`F`h^qjEAk4e+rlr1V8`;KmY_l00ck)1V8`;KmY_l;Qs}FuIYakGzS3?009sH V0T2KI5C8!X009sH0T5UXf!~PcoaX=l literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/server2.example.org/pwdfile b/test/aux-fixed/exim-ca/example.org/server2.example.org/pwdfile new file mode 100644 index 000000000..f3097ab13 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/server2.example.org/pwdfile @@ -0,0 +1 @@ +password diff --git a/test/aux-fixed/exim-ca/example.org/server2.example.org/secmod.db b/test/aux-fixed/exim-ca/example.org/server2.example.org/secmod.db new file mode 100644 index 0000000000000000000000000000000000000000..92af259c183aef394109fbe9bed977f26475a2e2 GIT binary patch literal 16384 zcmeI&O-jQ+6u|LkE2RsmZrq6sxX7+h_rXQoNKp#)0x_AE&@?HNRO-TGxc3Gg!*#ua zUcdv0&LkBrg19P0{sWKsdNcF#TSprEfr!*Zwx2}y>`-<@wruA@n#+ORFBj@%Uv5=N zcj@i3U31OlxLA8@R`sm?T^>XL0R#|0009ILKmY**5I_I{1Q0*~0R#|0009ILKmY** z5I|s41ZwiKyJ$VO7OhRGh&m8J009ILKmY**5I_I{1Q7U(Ktq(guKW?+v&SME)#Aa$ zV4%*@LYp*5RKM39sH09tooCT3(KhQL%+g^zielq?xi;6@9Jlp6m`oGh&dkVDp*BU| z=wUqfJx`7G&DSK?;UtUPIoG$ND^CrRV3hl6HjRQpmzR3WNq6O*DxvrNwrVN1_kA9@ z%*HxB)p=;*X%T0s+o}G;zptP8w)jIEKiY2}{Ps>m009ILKmY**5I_I{1Q0*~f&VV> E0jRG_!vFvP literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.chain.pem b/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.chain.pem new file mode 100644 index 000000000..5bcc299df --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.chain.pem @@ -0,0 +1,29 @@ +Bag Attributes + friendlyName: server2.example.org + localKeyID: 86 3E B2 BF BC 60 4F 3F C4 EA AA FE 97 44 A9 48 6B 4F C1 77 +subject=/CN=server2.example.org +issuer=/O=example.org/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAzCCAa2gAwIBAgICAMkwDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5vcmcxGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDNaFw0zODAxMDExMjM0MDNaMB4xHDAaBgNVBAMTE3NlcnZlcjIuZXhhbXBs +ZS5vcmcwXDANBgkqhkiG9w0BAQEFAANLADBIAkEA1bNd+LEj7UV8Riahrn/3TL1n +NwaIvqkqCFscP5ae3dB5rJ8vdfIc0hOzh782zpXxJxYa7S340zjxfgdUzMAeWQID +AQABo4G/MIG8MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm9yZy9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5vcmcvMB4GA1UdEQQXMBWCE3NlcnZlcjIuZXhhbXBs +ZS5vcmcwDQYJKoZIhvcNAQEFBQADQQBCORy4CO4MMENsEtYwU7xE0Ck5i8VefJ6D +txODMnRUzsthdbfjgXm3BfVPrhOuT0/bIKfyJtoSdCtN1SRPTJxO +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIBpzCCAVGgAwIBAgIBAjANBgkqhkiG9w0BAQUFADApMRQwEgYDVQQKEwtleGFt +cGxlLm9yZzERMA8GA1UEAxMIY2xpY2EgQ0EwHhcNMTIxMTAxMTIzNDAyWhcNMzgw +MTAxMTIzNDAyWjAzMRQwEgYDVQQKEwtleGFtcGxlLm9yZzEbMBkGA1UEAxMSY2xp +Y2EgU2lnbmluZyBDZXJ0MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJ2Y6E5WBXQE +zFsWgxK4JXrpPWGEQZ+KNy3iXgmupAA6Yy0umCLu+eGCekkwZ0WfFhhd+Qy7P+qo +F0mre7VDDHECAwEAAaNaMFgwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYB +Af8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxlLm9yZy9s +YXRlc3QuY3JsMA0GCSqGSIb3DQEBBQUAA0EATmemAFFWLNA8natXhFyhrDYmTv8X +PEJ3UVt0DmOMxmEBahIeDfplfTfj/NYvy/on7YCZO7F5PwVY2pNJqm8Tmw== +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.key b/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.key new file mode 100644 index 000000000..6f62ee00e --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.key @@ -0,0 +1,15 @@ +Bag Attributes + friendlyName: server2.example.org + localKeyID: 86 3E B2 BF BC 60 4F 3F C4 EA AA FE 97 44 A9 48 6B 4F C1 77 +Key Attributes: +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIBpjBABgkqhkiG9w0BBQ0wMzAbBgkqhkiG9w0BBQwwDgQIjfdds7UVEY0CAggA +MBQGCCqGSIb3DQMHBAiY22+2lkjkEASCAWDm5MmTuUgMOkSWscoH1Qn/GVM2sawP +TsknGm/HMV+bJlpGLCXwBrAKe6RDC+zlEmGVUSWJoxoPz1qQT9fcooyEFSCS8asN +omSw+8wrxXTSB57b1OqpHoV8VlTT60/sdVV8l9B1Ef/vsdjKB0NDwqUwDVg4Xw32 +wV3Tv8pFRLg3CBCEDeykcJ+FkodSope9UL6E95Ukhae335bTmWsxbrR4IZCUhI2t +/MOLyPnd6huPGlti2SH8PRRnei6TM/O8mH1uUzdSAqxoDA6wV+P6pIDI8GY1k61q +53oeq9ocSJOQ+q3kIyBQlGgApME47hog3sVZ/WsU3r071g9VKhzlFUFPOOkbUR9+ +gl7MDV/r/6IjOAHEaLFBQrnRVKbs93sTtf8pNhIHJLJtTWjDV/nBbiHxsNFIWqGU +ZlH0FU2DENHZqPiLxsfH1J9EmtTiHXgu/naD0m7RbmPm6ffIDPuYPVMw +-----END ENCRYPTED PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.ocsp.dated.resp b/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.ocsp.dated.resp new file mode 100644 index 0000000000000000000000000000000000000000..b15606af398df45788925c5e019fa8a33a0c433b GIT binary patch literal 726 zcmXqLV!Fh|$grS^>9j!;({VOVZ8k<$R(1nMMwTX~9YCQi291{&niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bwnq_JY;oDWriuT)?o4sX*O1?SYF5(7DLUZkKjiW28FwlIK& ztWgv>(PI#U>@r4R7^#7@?3H;o+skg~)+AM?2N0&WB*|b!dm>C%u7i$@481Ml-B+Jjp z_@9M^nTfr@Kn%oJ1@U1+ wFSM&1buZ+6u&_>Bw-46F?}*;uvtn3<$l8CXQVzKDAK<3O=!`UFl^#dXtrGFIrxvWWaEiwU~Z zEuMTElsS<&N$8iuBrstgCC%MXc}Ut<_W0{Kxzz+U7!b zw$b0&XPunpt>6B=U2tgzuQqpV@LiRS^Vl?|{b_#oC}=?wV~0T#V+#;B0I}8rW+p}^ zCPrp7n+%L`1e>&hBqZ2`Ai)L-vCO=51?SYF5(7DLUZij{iW28FwlIJNqfrz&abXaH z>@r4R7^#7@?3H;o+skg~)+AM?2N0&WB*|b!dm>C%u7i$@481Ml-B+Jjp_@9M^nTfr@ zKn%oJ1@U57>X*&UF$NPXMOl-nxdl&9x2lS#3^J1chg%m>1+FSM&1buZ+6 ou&Ar=dH?_b literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.ocsp.revoked.resp b/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.ocsp.revoked.resp new file mode 100644 index 0000000000000000000000000000000000000000..8fc3f99e17e7c8806807e7db7114aa98ef881662 GIT binary patch literal 707 zcmXqLV%pEe$grS^X@@}*(-t;PZ8k<$R(1nMMwTX~r9h#D28{<6niv=viWms7F^95n z33I1bB<2?6r0V4tr5j2aNPt9{g$0vyGLsV({GEdX6oNC;^HPf>_>Bw-46F?}*;uvtn3<$l8CXQVzKDAK<3O=!`UFl^#dXtrGFIrxvWWaEiwU~Z zEuMTElsS<&N$8iuBrstgCC%MXc}Ut<_W0{Kxzz+U7!b zw$b0&XPunpt>6B=U2tgzuQqpV@LiRS^Vl?|{b_#oC}=?wV~0T#V+#;B0I}8rW+p}^ zCPrp7n+%L`1e>&hBqZ2`Ai)L-vCO=51?SYF5(7DLUZij{iW28FwlIJNqfrz&abXaH z>@r4R7^#7@?3H;o+skg~)+AM?2N0&WB*|b!dm>C%u7i$@481Ml-B+Jjp_@9M^nTfr@ zKn%oJ1@U57>X*&UF$NPXMOl-nxdl&9x2lS#3^J1chg%m>1+FSM&1buZ+6 ou&qH(B zBmkntpkg2t_$nsm|JYzCh5`m*D4=ba(7z^x5g;&)0!rI4Z(&d{#J}yGwbBqVp7uo# za!n^&RD6R7E2^sig9Z8_6p)AQ?NGJ6g_p$=8>|VtKi+CT7K{vk2TGypdZy07DmLA` z_GZ%K1nz(@XZ7NOMsm4O=W)0ZuQc=Sl|-Y)6n<5K)G(jo{V*Fh{g^CW6-B!t%k5r5 z-xQl{GO0aeeu`RleboS+799LK>siuzP&$#;ZPmin8?%pzNw&Y|YAwb*_Dti~inZ80 zkNgs)QD0qOWNdep5Va&MzcTXrB-+UjBxizMW~8Y@<)JA^vpQmpe6M*cf9=ofVpb_} zr?~8U+E<|{X#xvqb8ZmjyWwAOEDqjUy}uaJ>wmOY1y+Xh`r;bk-_()~nMbE21u7fJ z<~2d)&Iw48SF73wl~Go{Vu86L&Idr-3iOZ>m`VKoJO27oS-bGH!}a~N_Co(b^zc$_ z3rJw_n=@F4>`&an{vlLWXG8jYVNd(+U24_|T_4bbBKyy!It<~G-tT#0VkX?-;bY%p z%JL5VLdUvc4*ln-g1fOAit0cRa1jUuLjP7>KxZe114O_dAOn6owGME3r|X4L{qL9* zRvNN9@z?5BhKGaM^VxEKmSvgsC5QGf;P3dE4;XC+7cdC;*#rF#4zM3Mh&0pAR5{3+ zRs=SSCcy~!A2`r}$KmwaMKiQ#o((C5Y-}?<)zvoG);a6NA7i>&=!RP&W zeJjBWala_wICbcGo`q_`z?i9X>zMQ#s+d5w;wUWxB}7Sk*u&k!PJoraR%cgnk{0&W zg#*X()(nY(uM*n}abuRx2PE&)C#yqOxd%)~;db?dQI~S?yuIhoKKV3!LKhi9$nG4= z=+-V(*IKDt!Gd#dy-bd8+l6Wt-=leL-+j4;(ldrk=9Y%CqR^k<_YjM2cyQvG^Gi~; zJ?}D)Q-8zvk7Ep@>Kty_*H)zZKaDi-<=F_F44ZsMG+l15E>UZ7CxIQ`#~)_gHVcU{ z@0FbnCqntG6KZ_CGcEc)gzEw(^!19MANYA+&J^>^W%Z(L1cY*vJB2A6-a zsLUFXg%FVqyVMsYcilBZ4Qo?3MU66UizgsdqU6slWm=e6GTUxPw;nE(Z;KuGiqYd& zb|;S-6J(nX+lIi5eROUa_g`u1Q%_9}y09gJs$iGDI9ZM5Qbq-2HQHw8BuKTTgTCJ3 zsH(6}JadDk`;E`b?^z;2N(RDi_4!5@CfH*tjIeLKFsE6Gf$N3oj8E^*KYU%@alJag}YDhXwdlO?R{fZ%Som{l&oaQ+h{} zCBE#6Rtn0;lf`-LGQ{+rQ!mQ+o>Wl1yzISVKs(>ej`!$COBxNU2K&Sm#Fql2*^ zD1Ah5L#gsBN=8K6XhGjNxL>7g3BgpCY_C%gIG_xDaW^);b%;56vRPGB$-cc@Jgq+G zD^&~eN#}t&#mP`}NNW@0&SF|3twwnQD`YR;HHwq4|`q~rb~i0$dDeZGh- zV2@o>Q`{8_k3IMZU_ z?2*(D@1IgkdbC(0X(dAxvJCNp!>I~UqpOG%|DQJG1Hyb9n5#Y^z zN}5fd9#T$}&=>#X_-9B}zUX5e zwXWz78t$#kwqyOU+>I`~d8(Iz=-52?yJd)Dp`O1<{q$~XhT4Oo%cj( z6@3pus1lce3s#FZ&dGTV_E{b~Tk+^q=6pO6e(tKP&Dtw*OU|jQeS!Hk`d>iw`d#4D z>A^89;-w3sXc~g!wIzt^%03e?P+cxxo~l+mMOG`Tm%MdmphGhqzv7-d{7BDFiZ&dC z^7~G64SSOSwlqIp+fb&yxRhib>3SpmldN^FrnqLH6$#06GDoy&Q86RTqSh;g9L9l}Z&Xf+ytMyYLaC{FpXZC> zjRZrrJkF}2|1&nEVRLp(Lb=jfJoU&0mZQ2x<@w5N=9h(L!F_(O@YjHR;2POFJH>Aw zlytPs#!kiN-ut##pP(W+7pCJ^uS(dmMOw`uBNHBd(MG9r>$X8c#yw&EzyQj)goWS- zxDt@hd)GX5gR~a0oNw!X+Cn@FWAOV7{0d+AX+3PFA?2m#G6#M32&XTubnChE(70Sw zF^Z~q*O7TbpFqY$gphE;PsJVH1Z6*4W2`yJbZ+L4I>ggk7Zt)7(_J1nNloii(-f^) z;p96#p8Z{x5ji={j1!HI%0CJi!5yt`CRP{tEN;8c=OLw+t%4+GGt=xn7Zyt7pO?{Z z`~^Bm8^!_ARZ^V*fTV0)e|y)Er1bzMRsVyw?|i*_&N S?i8ABK^>w;5kH<80Q>`I0ZNqs literal 0 HcmV?d00001 diff --git a/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.pem b/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.pem new file mode 100644 index 000000000..ed55c33bf --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.pem @@ -0,0 +1,18 @@ +Bag Attributes + friendlyName: server2.example.org + localKeyID: 86 3E B2 BF BC 60 4F 3F C4 EA AA FE 97 44 A9 48 6B 4F C1 77 +subject=/CN=server2.example.org +issuer=/O=example.org/CN=clica Signing Cert +-----BEGIN CERTIFICATE----- +MIICAzCCAa2gAwIBAgICAMkwDQYJKoZIhvcNAQEFBQAwMzEUMBIGA1UEChMLZXhh +bXBsZS5vcmcxGzAZBgNVBAMTEmNsaWNhIFNpZ25pbmcgQ2VydDAeFw0xMjExMDEx +MjM0MDNaFw0zODAxMDExMjM0MDNaMB4xHDAaBgNVBAMTE3NlcnZlcjIuZXhhbXBs +ZS5vcmcwXDANBgkqhkiG9w0BAQEFAANLADBIAkEA1bNd+LEj7UV8Riahrn/3TL1n +NwaIvqkqCFscP5ae3dB5rJ8vdfIc0hOzh782zpXxJxYa7S340zjxfgdUzMAeWQID +AQABo4G/MIG8MA4GA1UdDwEB/wQEAwIE8DAgBgNVHSUBAf8EFjAUBggrBgEFBQcD +AQYIKwYBBQUHAwIwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDovL2NybC5leGFtcGxl +Lm9yZy9sYXRlc3QuY3JsMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0 +cDovL29zY3AvZXhhbXBsZS5vcmcvMB4GA1UdEQQXMBWCE3NlcnZlcjIuZXhhbXBs +ZS5vcmcwDQYJKoZIhvcNAQEFBQADQQBCORy4CO4MMENsEtYwU7xE0Ck5i8VefJ6D +txODMnRUzsthdbfjgXm3BfVPrhOuT0/bIKfyJtoSdCtN1SRPTJxO +-----END CERTIFICATE----- diff --git a/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.unlocked.key b/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.unlocked.key new file mode 100644 index 000000000..38b2718e0 --- /dev/null +++ b/test/aux-fixed/exim-ca/example.org/server2.example.org/server2.example.org.unlocked.key @@ -0,0 +1,9 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIBOwIBAAJBANWzXfixI+1FfEYmoa5/90y9ZzcGiL6pKghbHD+Wnt3QeayfL3Xy +HNITs4e/Ns6V8ScWGu0t+NM48X4HVMzAHlkCAwEAAQJATzDe2+/Y3m5ndR+PvriR +DhEKFKwJNI4/k0UgHLhWOt/+y02ZfO5zhZaLvYG1BQbGKyhypdAGS8QP19xRVjI9 +uQIhAPs7Ql00hIvZvfRMmgh90otggbrWIrkW8Oh10BMFBdkTAiEA2cG+l36A5NAs +PlA7sOlQyFs5F4XNXzEy76vPsGR/pGMCIBjo3UGkjWfYZQ8t8S/aWd/b58EArlyv +u58w3zqjitrlAiEAsJeqlPkGVolsF+zBO6s61AEGv8jG0Ff50twmxgn6abkCIQDJ +pUSYU/YF7bYj5QuHRyemhzDytTQcAB7A4IEWZsSL9A== +-----END RSA PRIVATE KEY----- diff --git a/test/aux-fixed/exim-ca/genall b/test/aux-fixed/exim-ca/genall new file mode 100755 index 000000000..63a3618ee --- /dev/null +++ b/test/aux-fixed/exim-ca/genall @@ -0,0 +1,101 @@ +#!/bin/bash +# + +echo Ensure time is set to 2012/11/01 12:34 +echo use - date -u 110112342012 +echo hit return when ready +read junk +for tld in com org net +do + clica -D example.$tld -p password -B 512 -I -N example.$tld -F -C http://crl.example.$tld/latest.crl -O http://oscp/example.$tld/ + clica -D example.$tld -p password -s 101 -S server1.example.$tld + clica -D example.$tld -p password -s 102 -S revoked1.example.$tld + clica -D example.$tld -p password -s 103 -S expired1.example.$tld -m 1 + clica -D example.$tld -p password -s 201 -S server2.example.$tld + clica -D example.$tld -p password -s 202 -S revoked2.example.$tld + clica -D example.$tld -p password -s 203 -S expired2.example.$tld -m 1 +done + +# and loop again +for tld in com org net +do + CADIR=example.$tld/CA + #give ourselves an OSCP key to work with + pk12util -o $CADIR/OCSP.p12 -n 'OCSP Signer' -d $CADIR -K password -W password + openssl pkcs12 -in $CADIR/OCSP.p12 -passin pass:password -passout pass:password -nodes -nocerts -out $CADIR/OCSP.key + + + # create some index files for the ocsp responder to work with + cat >$CADIR/index.valid.txt <$CADIR/index.revoked.txt <$SPFX.chain.pem + done +done + +echo Please to reset date to now. +echo service ntpdate start +echo +echo Then hit return +read junk + +# Create CRL files in .der and .pem +# empty versions, and ones with the revoked servers +for tld in com org net +do + CADIR=example.$tld/CA + CRLIN=$CADIR/crl.empty.in.txt + DATENOW=`date -u +%Y%m%d%H%M%SZ` + echo "update=$DATENOW " >$CRLIN + crlutil -G -d $CADIR -f $CADIR/pwdfile \ + -n 'Signing Cert' -c $CRLIN -o $CADIR/crl.empty + openssl crl -in $CADIR/crl.empty -inform der -out $CADIR/crl.empty.pem +done +sleep 2 +for tld in com org net +do + CADIR=example.$tld/CA + CRLIN=$CADIR/crl.v2.in.txt + DATENOW=`date -u +%Y%m%d%H%M%SZ` + echo "update=$DATENOW " >$CRLIN + echo "addcert 102 $DATENOW" >>$CRLIN + echo "addcert 202 $DATENOW" >>$CRLIN + crlutil -G -d $CADIR -f $CADIR/pwdfile \ + -n 'Signing Cert' -c $CRLIN -o $CADIR/crl.v2 + openssl crl -in $CADIR/crl.v2 -inform der -out $CADIR/crl.v2.pem +done + +echo "CA, Certificate, CRL and OSCP Response generation complete" diff --git a/test/aux-fixed/ocsp_file.der b/test/aux-fixed/ocsp_file.der new file mode 100644 index 0000000000000000000000000000000000000000..f629d53e3e04620d09c3d536dc6fecd934eb930f GIT binary patch literal 1367 zcmXqLVh!eEWLVI|>SNHv>cPgT&Bn;e%5K2O$kN1W2^2ClXxz3)j76j;{zTn!ORwD= zb^kPew@y)6lXLf%1iz7ip%Dlgm>L)u7)KeT8KfB47;v(&YV$EONwG4ph&21xl)gF^ zqW?Bx(_U@S28~n$IX)JV>`dD%2`8_+{Y*k>KfzzxTI>%y9N1fRoN}uEOnST zZ%q09cQ!-q)!WjQ()ShxFXy{?>8JQ-lZU70?OQNwMy}86JS&!cdclPyORp@mJ2n0P z(w{pW7*tQYvWFgg(QkO7`KMs0_U@e;X}K2NPm8{ZHQDBsJC+=^dK(kI{QDOE@O{j# z8||h~SPw1<$->Jwp)#A&>;KFn3U5L1s#Du#bYXqk)__ zFDOwMS{Rxcni!Zz0lCJ&G-3(m8h8Hf~a0SZB>#Rd6!DXB#Yh6YWH zO30391V=SL15lic2^8m_7tb`yPSn01!594KR-eg)`&^8-{omi4-|R3UJYbSl<%aU_ z3=bstysA4Kx5WJcd-O>W|MgDaf(m12KMU>s7wG3)lvcVfMKe50>Opp1jpEXGPSJ&{ zKH5t^eJ-jJvbe&WCwAL!7X1jz!m8ASr#pG9lQu}Pu4XzdRF$>Fly`#IMBgBdKp)=A zst@mcWu6x*ccx^@!YRJ{TsgkRc!eYwmz1cl%GxQ;p{;r-JYT_`W?c)vyEJK;Pj6P90G zx}RIjHAMY+ZI_#crE)r0t7V1Pue1c_D+b2Jkp|(w9K#$ctIQ%{Al8622O97rvJ@)| z6Dxy(Fi3|g3y%R88waFhVCFR70}1joGX7^_VP;})Kn{FZKHJ`RBFXXb6`p;nZ`n3h z{kxHs+dH+@`r?XrrnmCt{HyIMT_o@M-`1F)lPSXE8N6GlaFIcwhGc7XjN?Kk{w}Qr z&z9Q0sQfqk9h-CI;aW+)oMis!Nj*C=YIc2=YcJww)Dryc%J}o!$v1`q2L_JhCl_``p`&Z=N_#J(F_S`q#yZGgEaVTJrA{CGQXVd~^Tq3Fj`~N;|?^5Hn$x z{$qxZEYnP@#8h4DSe%z!d7}B7Ip1ASdeuRbpL0Li+|+HzdHuXs(x>w!qmr|=Ec+@U yo0-hsn??V!KmYysuf6T2oWR(156;%G7EZG~p2^cv6Q&9jQOzwdI literal 0 HcmV?d00001 diff --git a/test/confs/5600 b/test/confs/5600 new file mode 100644 index 000000000..8b26ee7fa --- /dev/null +++ b/test/confs/5600 @@ -0,0 +1,66 @@ +# Exim test configuration 5600 +# OCSP stapling, server + +CRL= + +exim_path = EXIM_PATH +host_lookup_order = bydns +primary_hostname = server1.example.com +rfc1413_query_timeout = 0s +spool_directory = DIR/spool +log_file_path = DIR/spool/log/%slog +gecos_pattern = "" +gecos_name = CALLER_NAME + +# ----- Main settings ----- + +acl_smtp_rcpt = check_recipient + +log_selector = +tls_peerdn + +queue_only +queue_run_in_order + +tls_advertise_hosts = * + +tls_certificate = DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.pem +tls_privatekey = DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key + +tls_verify_hosts = HOSTIPV4 +tls_try_verify_hosts = * +tls_verify_certificates = DIR/aux-fixed/cert2 +tls_crl = CRL +tls_ocsp_file = OCSP + + +# ------ ACL ------ + +begin acl + +check_recipient: + deny message = certificate not verified: peerdn=$tls_peerdn + ! verify = certificate + accept + + +# ----- Routers ----- + +begin routers + +abc: + driver = accept + retry_use_local_part + transport = local_delivery + + +# ----- Transports ----- + +begin transports + +local_delivery: + driver = appendfile + file = DIR/test-mail/$local_part + headers_add = TLS: cipher=$tls_cipher peerdn=$tls_peerdn + user = CALLER + +# End diff --git a/test/confs/5601 b/test/confs/5601 new file mode 100644 index 000000000..5172ff279 --- /dev/null +++ b/test/confs/5601 @@ -0,0 +1,121 @@ +# Exim test configuration 5601 +# OCSP stapling, client + +SERVER = + +exim_path = EXIM_PATH +host_lookup_order = bydns +primary_hostname = server1.example.com +rfc1413_query_timeout = 0s +spool_directory = DIR/spool +log_file_path = DIR/spool/log/SERVER%slog +gecos_pattern = "" +gecos_name = CALLER_NAME + + +# ----- Main settings ----- + +domainlist local_domains = test.ex : *.test.ex + +acl_smtp_rcpt = check_recipient +log_selector = +tls_peerdn +remote_max_parallel = 1 + +tls_advertise_hosts = * + +# Set certificate only if server + +tls_certificate = ${if eq {SERVER}{server}\ +{DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.chain.pem}\ +fail\ +} + +#{DIR/aux-fixed/exim-ca/example.com/CA/CA.pem}\ + +tls_privatekey = ${if eq {SERVER}{server}\ +{DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key}\ +fail} + +tls_ocsp_file = OCSP + + +# ------ ACL ------ + +begin acl + +check_recipient: + accept domains = +local_domains + deny message = relay not permitted + + +# ----- Routers ----- + +begin routers + +client: + driver = accept + condition = ${if eq {SERVER}{server}{no}{yes}} + retry_use_local_part + transport = send_to_server${if eq{$local_part}{nostaple}{1} \ + {${if eq{$local_part}{smtps} {3}{2}}} \ + } + +server: + driver = redirect + data = :blackhole: + #retry_use_local_part + #transport = local_delivery + + +# ----- Transports ----- + +begin transports + +local_delivery: + driver = appendfile + file = DIR/test-mail/$local_part + headers_add = TLS: cipher=$tls_cipher peerdn=$tls_peerdn + user = CALLER + +send_to_server1: + driver = smtp + allow_localhost + hosts = HOSTIPV4 + port = PORT_D + tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/CA/CA.pem + hosts_require_tls = * +# note no ocsp here + +send_to_server2: + driver = smtp + allow_localhost + hosts = 127.0.0.1 + port = PORT_D + helo_data = helo.data.changed + #tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem + tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/CA/CA.pem + hosts_require_tls = * + hosts_require_ocsp = * + +send_to_server3: + driver = smtp + allow_localhost + hosts = 127.0.0.1 + port = PORT_D + helo_data = helo.data.changed + #tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem + tls_verify_certificates = DIR/aux-fixed/exim-ca/example.com/CA/CA.pem + protocol = smtps + hosts_require_tls = * + hosts_require_ocsp = * + + +# ----- Retry ----- + + +begin retry + +* * F,5d,1s + + +# End diff --git a/test/log/5600 b/test/log/5600 new file mode 100644 index 000000000..869883f06 --- /dev/null +++ b/test/log/5600 @@ -0,0 +1,6 @@ +1999-03-02 09:44:33 exim x.yz daemon started: pid=pppp, no queue runs, listening for SMTP on port 1225 +1999-03-02 09:44:33 [ip4.ip4.ip4.ip4] Recieved OCSP stapling req; responding +1999-03-02 09:44:33 exim x.yz daemon started: pid=pppp, no queue runs, listening for SMTP on port 1225 +1999-03-02 09:44:33 [ip4.ip4.ip4.ip4] Recieved OCSP stapling req; not responding +1999-03-02 09:44:33 exim x.yz daemon started: pid=pppp, no queue runs, listening for SMTP on port 1225 +1999-03-02 09:44:33 [ip4.ip4.ip4.ip4] Recieved OCSP stapling req; not responding diff --git a/test/log/5601 b/test/log/5601 new file mode 100644 index 000000000..40caa0f88 --- /dev/null +++ b/test/log/5601 @@ -0,0 +1,41 @@ +1999-03-02 09:44:33 10HmaX-0005vi-00 <= CALLER@server1.example.com U=CALLER P=local S=sss +1999-03-02 09:44:33 10HmaX-0005vi-00 => nostaple@test.ex R=client T=send_to_server1 H=ip4.ip4.ip4.ip4 [ip4.ip4.ip4.ip4] X=TLSv1:AES256-SHA:256 DN="/CN=server1.example.com" C="250 OK id=10HmaY-0005vi-00" +1999-03-02 09:44:33 10HmaX-0005vi-00 Completed +1999-03-02 09:44:33 10HmaZ-0005vi-00 <= CALLER@server1.example.com U=CALLER P=local S=sss +1999-03-02 09:44:33 10HmaZ-0005vi-00 => CALLER@test.ex R=client T=send_to_server2 H=127.0.0.1 [127.0.0.1] X=TLSv1:AES256-SHA:256 DN="/CN=server1.example.com" C="250 OK id=10HmbA-0005vi-00" +1999-03-02 09:44:33 10HmaZ-0005vi-00 Completed +1999-03-02 09:44:33 10HmbB-0005vi-00 <= CALLER@server1.example.com U=CALLER P=local S=sss +1999-03-02 09:44:33 10HmbB-0005vi-00 Received TLS status response, null content +1999-03-02 09:44:33 10HmbB-0005vi-00 TLS error on connection to 127.0.0.1 [127.0.0.1] (SSL_connect): error: <> +1999-03-02 09:44:33 10HmbB-0005vi-00 == CALLER@test.ex R=client T=send_to_server2 defer (-37): failure while setting up TLS session +1999-03-02 09:44:33 10HmbC-0005vi-00 <= CALLER@server1.example.com U=CALLER P=local S=sss +1999-03-02 09:44:33 10HmbC-0005vi-00 Server certificate revoked; reason: superseded +1999-03-02 09:44:33 10HmbC-0005vi-00 TLS error on connection to 127.0.0.1 [127.0.0.1] (SSL_connect): error: <> +1999-03-02 09:44:33 10HmbC-0005vi-00 == CALLER@test.ex R=client T=send_to_server2 defer (-37): failure while setting up TLS session +1999-03-02 09:44:33 10HmbD-0005vi-00 <= CALLER@server1.example.com U=CALLER P=local S=sss +1999-03-02 09:44:33 10HmbD-0005vi-00 Server OSCP dates invalid +1999-03-02 09:44:33 10HmbD-0005vi-00 TLS error on connection to 127.0.0.1 [127.0.0.1] (SSL_connect): error: <> +1999-03-02 09:44:33 10HmbD-0005vi-00 == CALLER@test.ex R=client T=send_to_server2 defer (-37): failure while setting up TLS session + +******** SERVER ******** +1999-03-02 09:44:33 exim x.yz daemon started: pid=pppp, no queue runs, listening for SMTP on port 1225 +1999-03-02 09:44:33 10HmaY-0005vi-00 <= CALLER@server1.example.com H=the.local.host.name (server1.example.com) [ip4.ip4.ip4.ip4] P=esmtps X=TLSv1:AES256-SHA:256 S=sss id=E10HmaX-0005vi-00@server1.example.com +1999-03-02 09:44:33 10HmaY-0005vi-00 => :blackhole: R=server +1999-03-02 09:44:33 10HmaY-0005vi-00 Completed +1999-03-02 09:44:33 exim x.yz daemon started: pid=pppp, no queue runs, listening for SMTP on port 1225 +1999-03-02 09:44:33 [127.0.0.1] Recieved OCSP stapling req; responding +1999-03-02 09:44:33 10HmbA-0005vi-00 <= CALLER@server1.example.com H=(helo.data.changed) [127.0.0.1] P=esmtps X=TLSv1:AES256-SHA:256 S=sss id=E10HmaZ-0005vi-00@server1.example.com +1999-03-02 09:44:33 10HmbA-0005vi-00 => :blackhole: R=server +1999-03-02 09:44:33 10HmbA-0005vi-00 Completed +1999-03-02 09:44:33 exim x.yz daemon started: pid=pppp, no queue runs, listening for SMTP on port 1225 +1999-03-02 09:44:33 [127.0.0.1] Recieved OCSP stapling req; not responding +1999-03-02 09:44:33 TLS error on connection from (helo.data.changed) [127.0.0.1] (SSL_accept): error: <> +1999-03-02 09:44:33 TLS client disconnected cleanly (rejected our certificate?) +1999-03-02 09:44:33 exim x.yz daemon started: pid=pppp, no queue runs, listening for SMTP on port 1225 +1999-03-02 09:44:33 [127.0.0.1] Recieved OCSP stapling req; responding +1999-03-02 09:44:33 TLS error on connection from (helo.data.changed) [127.0.0.1] (SSL_accept): error: <> +1999-03-02 09:44:33 TLS client disconnected cleanly (rejected our certificate?) +1999-03-02 09:44:33 exim x.yz daemon started: pid=pppp, no queue runs, listening for SMTP on port 1225 +1999-03-02 09:44:33 [127.0.0.1] Recieved OCSP stapling req; responding +1999-03-02 09:44:33 TLS error on connection from (helo.data.changed) [127.0.0.1] (SSL_accept): error: <> +1999-03-02 09:44:33 TLS client disconnected cleanly (rejected our certificate?) diff --git a/test/msglog/2145.10HmaX-0005vi-00 b/test/msglog/2145.10HmaX-0005vi-00 new file mode 100644 index 000000000..33692c6c0 --- /dev/null +++ b/test/msglog/2145.10HmaX-0005vi-00 @@ -0,0 +1 @@ +1999-03-02 09:44:33 Received from CALLER@myhost.test.ex U=CALLER P=local S=sss diff --git a/test/scripts/5600-OCSP-OpenSSL/5600 b/test/scripts/5600-OCSP-OpenSSL/5600 new file mode 100644 index 000000000..464da693c --- /dev/null +++ b/test/scripts/5600-OCSP-OpenSSL/5600 @@ -0,0 +1,80 @@ +# TLS server: OCSP stapling +# +# +# +# 1: Server sends good staple on request +exim -bd -oX PORT_D -DSERVER=server \ + -DOCSP=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp +**** +client-ssl \ + -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \ + HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2 +??? 220 +ehlo rhu.barb +??? 250- +??? 250- +??? 250- +??? 250- +??? 250- +??? 250 +starttls +??? 220 +mail from: +??? 250 +rcpt to: +??? 250 +quit +??? 221 +**** +killdaemon +# +# +# +# 2: Server does not staple an outdated response +exim -bd -oX PORT_D -DSERVER=server \ + -DOCSP=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp +**** +# XXX test sequence might not be quite right; this is for a server refusal +# and we're expecting a client refusal. +client-ssl -ocsp aux-fixed/exim-ca/expired1.example.com/CA.pem HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2 +??? 220 +ehlo rhu.barb +??? 250- +??? 250- +??? 250- +??? 250- +??? 250- +??? 250 +starttls +??? 220 +**** +killdaemon +# +# +# +# +# +# 3: Server does not staple a response for a revoked cert +exim -bd -oX PORT_D -DSERVER=server \ + -DOCSP=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp +**** +client-ssl \ + -ocsp aux-fixed/exim-ca/example.com/server1.example.com/ca_chain.pem \ + HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2 +??? 220 +ehlo rhu.barb +??? 250- +??? 250- +??? 250- +??? 250- +??? 250- +??? 250 +starttls +??? 220 +**** +killdaemon +# +# +# +# +# diff --git a/test/scripts/5600-OCSP-OpenSSL/5601 b/test/scripts/5600-OCSP-OpenSSL/5601 new file mode 100644 index 000000000..b2983eb0d --- /dev/null +++ b/test/scripts/5600-OCSP-OpenSSL/5601 @@ -0,0 +1,65 @@ +# OCSP stapling, client +# +# +# Client works when we don't demand OCSP stapling +exim -bd -oX PORT_D -DSERVER=server -DOCSP=/dev/null +**** +exim nostaple@test.ex +test message. +**** +sleep 1 +killdaemon +# +# +# +# +# Client accepts good stapled info +exim -bd -oX PORT_D -DSERVER=server \ + -DOCSP=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.good.resp +**** +exim CALLER@test.ex +test message. +**** +sleep 1 +killdaemon +# +# +# +# Client fails on lack of requested stapled info +exim -bd -oX PORT_D -DSERVER=server -DOCSP=/dev/null +**** +exim CALLER@test.ex +test message. +**** +sleep 1 +killdaemon +no_msglog_check +# +# +# +# Client fails on revoked stapled info +EXIM_TESTHARNESS_DISABLE_OCSPVALIDITYCHECK=y exim -bd -oX PORT_D -DSERVER=server \ + -DOCSP=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.revoked.resp +**** +exim CALLER@test.ex +test message. +**** +sleep 1 +killdaemon +# +# +# +# +# Client fails on expired stapled info +EXIM_TESTHARNESS_DISABLE_OCSPVALIDITYCHECK=y exim -bd -oX PORT_D -DSERVER=server \ + -DOCSP=DIR/aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.ocsp.dated.resp +**** +exim CALLER@test.ex +test message. +**** +sleep 1 +killdaemon +# +# +# +# diff --git a/test/scripts/5600-OCSP-OpenSSL/REQUIRES b/test/scripts/5600-OCSP-OpenSSL/REQUIRES new file mode 100644 index 000000000..3d15ede9e --- /dev/null +++ b/test/scripts/5600-OCSP-OpenSSL/REQUIRES @@ -0,0 +1,3 @@ +support OpenSSL +support Experimental_OCSP +running IPv4 diff --git a/test/src/client.c b/test/src/client.c index 58ab56d4c..3b782f3fd 100644 --- a/test/src/client.c +++ b/test/src/client.c @@ -1,7 +1,8 @@ /* A little hacked up program that makes a TCP/IP call and reads a script to drive it, for testing Exim server code running as a daemon. It's got a bit messy with the addition of support for either OpenSSL or GnuTLS. The code for -those was hacked out of Exim itself. */ +those was hacked out of Exim itself, then code for OCSP stapling was ripped +from the openssl ocsp and s_client utilities. */ /* ANSI C standard includes */ @@ -66,6 +67,9 @@ latter needs a whole pile of tables. */ #include #include #include +#include + +char * ocsp_stapling = NULL; #endif @@ -145,6 +149,91 @@ sigalrm_seen = 1; /****************************************************************************/ #ifdef HAVE_OPENSSL + +X509_STORE * +setup_verify(BIO *bp, char *CAfile, char *CApath) +{ + X509_STORE *store; + X509_LOOKUP *lookup; + if(!(store = X509_STORE_new())) goto end; + lookup=X509_STORE_add_lookup(store,X509_LOOKUP_file()); + if (lookup == NULL) goto end; + if (CAfile) { + if(!X509_LOOKUP_load_file(lookup,CAfile,X509_FILETYPE_PEM)) { + BIO_printf(bp, "Error loading file %s\n", CAfile); + goto end; + } + } else X509_LOOKUP_load_file(lookup,NULL,X509_FILETYPE_DEFAULT); + + lookup=X509_STORE_add_lookup(store,X509_LOOKUP_hash_dir()); + if (lookup == NULL) goto end; + if (CApath) { + if(!X509_LOOKUP_add_dir(lookup,CApath,X509_FILETYPE_PEM)) { + BIO_printf(bp, "Error loading directory %s\n", CApath); + goto end; + } + } else X509_LOOKUP_add_dir(lookup,NULL,X509_FILETYPE_DEFAULT); + + ERR_clear_error(); + return store; + end: + X509_STORE_free(store); + return NULL; +} + + +static int +tls_client_stapling_cb(SSL *s, void *arg) +{ +const unsigned char *p; +int len; +OCSP_RESPONSE *rsp; +OCSP_BASICRESP *bs; +char *CAfile = NULL; +X509_STORE *store = NULL; +int ret = 1; + +len = SSL_get_tlsext_status_ocsp_resp(s, &p); +/*BIO_printf(arg, "OCSP response: ");*/ +if (!p) + { + BIO_printf(arg, "no response received\n"); + return 1; + } +if(!(rsp = d2i_OCSP_RESPONSE(NULL, &p, len))) + { + BIO_printf(arg, "response parse error\n"); + BIO_dump_indent(arg, (char *)p, len, 4); + return 0; + } +if(!(bs = OCSP_response_get1_basic(rsp))) + { + BIO_printf(arg, "error parsing response\n"); + return 0; + } + +CAfile = ocsp_stapling; +if(!(store = setup_verify(arg, CAfile, NULL))) + { + BIO_printf(arg, "error in cert setup\n"); + return 0; + } + +/* No file of alternate certs, no options */ +if(OCSP_basic_verify(bs, NULL, store, 0) <= 0) + { + BIO_printf(arg, "Response Verify Failure\n"); + ERR_print_errors(arg); + ret = 0; + } +else + BIO_printf(arg, "Response verify OK\n"); + +X509_STORE_free(store); +return ret; +} + + /************************************************* * Start an OpenSSL TLS session * *************************************************/ @@ -161,6 +250,13 @@ SSL_set_session_id_context(*ssl, sid_ctx, strlen(sid_ctx)); SSL_set_fd (*ssl, sock); SSL_set_connect_state(*ssl); +if (ocsp_stapling) + { + SSL_CTX_set_tlsext_status_cb(ctx, tls_client_stapling_cb); + SSL_CTX_set_tlsext_status_arg(ctx, BIO_new_fp(stdout, BIO_NOCLOSE)); + SSL_set_tlsext_status_type(*ssl, TLSEXT_STATUSTYPE_ocsp); + } + signal(SIGALRM, sigalrm_handler_flag); sigalrm_seen = 0; alarm(5); @@ -418,6 +514,17 @@ while (argc >= argi + 1 && argv[argi][0] == '-') tls_on_connect = 1; argi++; } +#ifdef HAVE_OPENSSL + else if (strcmp(argv[argi], "-ocsp") == 0) + { + if (argc < ++argi + 1) + { + fprintf(stderr, "Missing required certificate file for ocsp option\n"); + exit(1); + } + ocsp_stapling = argv[argi++]; + } +#endif else if (argv[argi][1] == 't' && isdigit(argv[argi][2])) { tmplong = strtol(argv[argi]+2, &end, 10); diff --git a/test/stderr/5600 b/test/stderr/5600 new file mode 100644 index 000000000..045fadc9b --- /dev/null +++ b/test/stderr/5600 @@ -0,0 +1,2 @@ + +******** SERVER ******** diff --git a/test/stderr/5601 b/test/stderr/5601 new file mode 100644 index 000000000..045fadc9b --- /dev/null +++ b/test/stderr/5601 @@ -0,0 +1,2 @@ + +******** SERVER ******** diff --git a/test/stdout/5600 b/test/stdout/5600 new file mode 100644 index 000000000..9020be17e --- /dev/null +++ b/test/stdout/5600 @@ -0,0 +1,142 @@ +Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected +Certificate file = aux-fixed/cert2 +Key file = aux-fixed/cert2 +??? 220 +<<< 220 server1.example.com ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000 +>>> ehlo rhu.barb +??? 250- +<<< 250-server1.example.com Hello rhu.barb [ip4.ip4.ip4.ip4] +??? 250- +<<< 250-SIZE 52428800 +??? 250- +<<< 250-8BITMIME +??? 250- +<<< 250-PIPELINING +??? 250- +<<< 250-STARTTLS +??? 250 +<<< 250 HELP +>>> starttls +??? 220 +<<< 220 TLS go ahead +Attempting to start TLS +SSL info: before/connect initialization +SSL info: before/connect initialization +SSL info: SSLv2/v3 write client hello A +SSL info: SSLv3 read server hello A +SSL info: SSLv3 read server certificate A +Response verify OK +SSL info: unknown state +SSL info: SSLv3 read server key exchange A +SSL info: SSLv3 read server certificate request A +SSL info: SSLv3 read server done A +SSL info: SSLv3 write client certificate A +SSL info: SSLv3 write client key exchange A +SSL info: SSLv3 write certificate verify A +SSL info: SSLv3 write change cipher spec A +SSL info: SSLv3 write finished A +SSL info: SSLv3 flush data +SSL info: SSLv3 read server session ticket A +SSL info: SSLv3 read finished A +SSL info: SSL negotiation finished successfully +SSL info: SSL negotiation finished successfully +SSL connection using AES256-SHA +Succeeded in starting TLS +>>> mail from: +??? 250 +<<< 250 OK +>>> rcpt to: +??? 250 +<<< 250 Accepted +>>> quit +??? 221 +<<< 221 server1.example.com closing connection +End of script +Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected +Certificate file = aux-fixed/cert2 +Key file = aux-fixed/cert2 +??? 220 +<<< 220 server1.example.com ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000 +>>> ehlo rhu.barb +??? 250- +<<< 250-server1.example.com Hello rhu.barb [ip4.ip4.ip4.ip4] +??? 250- +<<< 250-SIZE 52428800 +??? 250- +<<< 250-8BITMIME +??? 250- +<<< 250-PIPELINING +??? 250- +<<< 250-STARTTLS +??? 250 +<<< 250 HELP +>>> starttls +??? 220 +<<< 220 TLS go ahead +Attempting to start TLS +SSL info: before/connect initialization +SSL info: before/connect initialization +SSL info: SSLv2/v3 write client hello A +no response received +SSL info: SSLv3 read server hello A +SSL info: SSLv3 read server certificate A +SSL info: SSLv3 read server key exchange A +SSL info: SSLv3 read server certificate request A +SSL info: SSLv3 read server done A +SSL info: SSLv3 write client certificate A +SSL info: SSLv3 write client key exchange A +SSL info: SSLv3 write certificate verify A +SSL info: SSLv3 write change cipher spec A +SSL info: SSLv3 write finished A +SSL info: SSLv3 flush data +SSL info: SSLv3 read server session ticket A +SSL info: SSLv3 read finished A +SSL info: SSL negotiation finished successfully +SSL info: SSL negotiation finished successfully +SSL connection using AES256-SHA +Succeeded in starting TLS +End of script +Connecting to ip4.ip4.ip4.ip4 port 1225 ... connected +Certificate file = aux-fixed/cert2 +Key file = aux-fixed/cert2 +??? 220 +<<< 220 server1.example.com ESMTP Exim x.yz Tue, 2 Mar 1999 09:44:33 +0000 +>>> ehlo rhu.barb +??? 250- +<<< 250-server1.example.com Hello rhu.barb [ip4.ip4.ip4.ip4] +??? 250- +<<< 250-SIZE 52428800 +??? 250- +<<< 250-8BITMIME +??? 250- +<<< 250-PIPELINING +??? 250- +<<< 250-STARTTLS +??? 250 +<<< 250 HELP +>>> starttls +??? 220 +<<< 220 TLS go ahead +Attempting to start TLS +SSL info: before/connect initialization +SSL info: before/connect initialization +SSL info: SSLv2/v3 write client hello A +no response received +SSL info: SSLv3 read server hello A +SSL info: SSLv3 read server certificate A +SSL info: SSLv3 read server key exchange A +SSL info: SSLv3 read server certificate request A +SSL info: SSLv3 read server done A +SSL info: SSLv3 write client certificate A +SSL info: SSLv3 write client key exchange A +SSL info: SSLv3 write certificate verify A +SSL info: SSLv3 write change cipher spec A +SSL info: SSLv3 write finished A +SSL info: SSLv3 flush data +SSL info: SSLv3 read server session ticket A +SSL info: SSLv3 read finished A +SSL info: SSL negotiation finished successfully +SSL info: SSL negotiation finished successfully +SSL connection using AES256-SHA +Succeeded in starting TLS +End of script diff --git a/test/trusted_configs b/test/trusted_configs new file mode 100644 index 000000000..47a1ec920 --- /dev/null +++ b/test/trusted_configs @@ -0,0 +1 @@ +/root/git/exim/test/test-config -- 2.30.2