Update unittest data (open-eid#588)

IB-8010 Signed-off-by: Raul Metsma <raul@metsma.ee>
klemensn · Nov 12, 2024 · 2a729b7 · 2a729b7
1 parent 2922c70
commit 2a729b7
Show file tree

Hide file tree

Showing 16 changed files with 302 additions and 253 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -4,7 +4,7 @@ permissions:
   contents: read
 env:
   BUILD_NUMBER: ${{ github.run_number }}
-  CMAKE_BUILD_PARALLEL_LEVEL: 3
+  CMAKE_BUILD_PARALLEL_LEVEL: 4
 jobs:
   macos:
     name: Build on macOS for ${{ matrix.target }}

diff --git a/debian/rules b/debian/rules
@@ -6,6 +6,3 @@ DEB_MAKE_CHECK_TARGET = test
 
 override_dh_builddeb:
 	dh_builddeb -- -Zgzip
-
-override_dh_auto_test:
-	DEB_BUILD_OPTIONS=parallel=1 dh_auto_test
diff --git a/test/TSLTests.cpp b/test/TSLTests.cpp
@@ -28,9 +28,9 @@ class TSLFixture: public DigiDocPPFixture
 {
 public:
     TSLFixture()
+        : DigiDocPPFixture{boost::unit_test::framework::master_test_suite().argv[
+            boost::unit_test::framework::master_test_suite().argc - 3]}
     {
-        copyTSL(boost::unit_test::framework::master_test_suite().argv[
-            boost::unit_test::framework::master_test_suite().argc - 3]);
         digidoc::initialize("untitestboost");
     }
 };

diff --git a/test/data/EE_T-good.xml → test/data/EE_T.xml b/test/data/EE_T-good.xml → test/data/EE_T.xml
diff --git a/test/data/ca.crt b/test/data/ca.crt
@@ -2,82 +2,81 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number: 1 (0x1)
-        Signature Algorithm: sha1WithRSAEncryption
+        Signature Algorithm: sha512WithRSAEncryption
         Issuer: C=EE, CN=libdigidocpp CA
         Validity
-            Not Before: Mar 23 23:13:46 2014 GMT
-            Not After : Mar 20 23:13:46 2024 GMT
+            Not Before: Mar 21 08:52:59 2024 GMT
+            Not After : Mar 19 08:52:59 2034 GMT
         Subject: C=EE, CN=libdigidocpp CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:cf:03:d5:3c:2b:fa:6f:c3:4f:47:75:1d:f6:21:
-                    d6:17:ee:f2:53:eb:91:92:59:80:ae:43:62:27:2c:
-                    21:42:db:e9:b5:8e:e4:d9:3e:cf:a0:c5:5a:5d:fc:
-                    91:c6:b9:38:e8:b1:57:01:85:3e:8d:df:77:0b:a5:
-                    46:21:cb:70:47:1c:a6:fd:14:3d:90:cc:93:b7:bb:
-                    3d:33:da:68:82:aa:db:44:9a:dc:c8:c2:3b:2b:96:
-                    11:67:b5:98:c6:bc:6d:15:9f:3b:88:5d:c1:be:f5:
-                    6c:66:50:04:97:92:5d:ef:d8:74:46:52:74:b0:1e:
-                    ba:83:e3:1a:df:90:8f:ae:e9:01:64:52:6c:2b:b1:
-                    4f:bf:b8:ff:58:b8:dc:ef:20:bb:4a:87:aa:97:ad:
-                    b1:13:0e:46:61:49:a1:1a:84:64:94:c1:68:4c:b6:
-                    4f:08:50:54:37:f0:c6:d2:af:b5:ed:3d:d9:af:83:
-                    7d:d5:94:e3:21:e7:67:68:55:e3:ce:48:62:83:c4:
-                    35:7e:fb:04:17:e8:ce:31:a4:48:f8:f0:9c:bc:be:
-                    15:af:33:86:ae:3a:22:ac:4a:b8:44:bb:aa:dc:9d:
-                    49:7c:13:74:f0:03:d5:b5:de:ca:e7:e0:c0:ba:13:
-                    d1:33:48:2d:0a:91:0d:8a:41:ef:66:56:f2:2b:99:
-                    67:b1
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cd:ae:a8:f6:87:84:64:25:f9:b2:ac:56:72:24:
+                    49:37:27:e6:65:ad:3c:9d:2e:49:20:d1:d9:d5:b5:
+                    e4:5b:a6:7c:b8:b5:17:e3:c8:1e:1d:28:19:4a:9c:
+                    03:02:b1:50:58:62:24:a4:80:9f:7b:4c:85:51:67:
+                    05:de:d2:27:1f:74:7c:18:58:18:8f:ad:2d:b2:61:
+                    83:be:53:2c:e2:a8:73:da:1f:7e:60:a1:4f:fa:4f:
+                    67:18:5c:7b:98:97:9d:43:61:b6:39:43:42:e0:a3:
+                    9a:45:40:42:3e:4c:4b:25:89:44:65:92:dc:83:5d:
+                    3c:5b:8c:de:44:21:bc:31:0a:5c:c4:b2:56:d0:bf:
+                    6c:f2:8f:19:9a:6b:fa:7d:ab:62:8b:be:e7:44:f9:
+                    94:22:21:05:91:3e:48:30:d5:ae:ed:53:2f:23:f5:
+                    f8:55:bb:ad:b7:8a:34:eb:86:08:8b:00:14:47:5e:
+                    66:46:a1:01:8e:c4:d3:81:fa:57:be:78:0f:8e:e5:
+                    14:31:4d:c6:9e:14:6b:3b:37:42:db:df:43:44:11:
+                    67:ba:b0:50:a0:67:a2:4a:e0:1e:4c:99:cb:25:04:
+                    fa:7a:f7:a2:9f:71:46:54:de:0e:ee:56:54:7b:bb:
+                    be:22:2e:7b:8e:8f:b7:dc:64:98:f5:48:dc:63:1e:
+                    71:05
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
                 CA:TRUE
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
+            X509v3 Extended Key Usage: critical
+                OCSP Signing, TLS Web Client Authentication, E-mail Protection, TLS Web Server Authentication
             X509v3 Subject Key Identifier: 
-                3E:C2:49:19:BB:C8:B0:5F:49:74:A1:6E:B7:17:6D:21:7D:BC:0C:08
-            X509v3 Extended Key Usage: 
-                TLS Web Client Authentication, TLS Web Server Authentication, Code Signing, E-mail Protection, Time Stamping, OCSP Signing
+                09:E6:58:FB:4B:F5:DB:25:BB:C3:E2:F6:C6:90:57:F6:E8:95:78:20
             Authority Information Access: 
-                OCSP - URI:http://www.openxades.org/cgi-bin/ocsp.cgi
-
-    Signature Algorithm: sha1WithRSAEncryption
-        8c:5c:2c:e2:3e:a8:3f:85:8a:f1:3d:64:87:7c:52:34:97:88:
-        36:e5:85:9d:67:3b:35:77:c8:e8:fc:86:13:23:36:40:12:56:
-        e1:55:f7:bf:1c:1e:02:9a:a9:5f:da:13:9b:12:a2:e4:19:98:
-        d5:53:db:12:3f:5c:a6:60:7c:d0:aa:ee:da:50:f6:a0:32:b3:
-        b3:12:8d:91:c2:6c:28:ee:ec:1b:e2:10:3c:cd:4d:33:fd:e5:
-        bd:02:a8:76:94:71:7b:3d:ea:31:bb:04:ef:25:84:e5:5a:4c:
-        36:68:01:ec:73:bb:d6:0a:21:98:3c:0c:19:33:9f:5b:27:09:
-        17:cb:ae:e6:4d:1d:33:36:47:7c:be:c0:18:11:91:52:6e:fd:
-        dc:a5:02:fc:d2:53:da:4b:26:51:1e:e1:b7:cf:44:ff:11:5a:
-        35:ae:fe:9e:c4:d6:01:59:7c:10:f3:7b:55:84:1a:d7:80:9c:
-        ab:95:88:a5:0c:00:b7:0a:e9:16:97:fb:89:81:db:26:43:a7:
-        d1:39:fd:04:6f:9f:22:14:95:c9:ca:47:5a:8c:a7:9e:12:14:
-        00:40:3e:b5:f5:ec:bd:74:fd:6e:fa:6d:83:f5:ff:c3:7b:31:
-        26:c4:78:17:b9:7f:d1:a6:09:21:c0:50:d2:10:99:77:b0:08:
-        f1:0d:74:df
+                OCSP - URI:http://demo.sk.ee/ocsp
+    Signature Algorithm: sha512WithRSAEncryption
+    Signature Value:
+        25:b5:2b:e6:8a:81:f7:fd:c4:5b:28:03:3f:ae:89:23:5a:ad:
+        81:84:9a:8d:62:c3:b3:ad:57:f7:1a:cd:20:a3:ea:fb:ee:50:
+        81:ae:c0:08:ce:b4:c7:69:88:67:50:c6:05:82:a1:2c:cc:0a:
+        c9:0d:39:1a:9e:21:45:b6:0a:96:9f:8b:9a:5a:0d:c8:ab:8c:
+        cd:6e:47:89:49:ee:a3:6a:80:ec:22:ec:75:33:79:29:57:2e:
+        0a:06:7e:c9:7d:14:f5:63:54:e4:28:78:11:22:00:24:fc:45:
+        c4:29:ce:c1:a8:49:5e:79:88:71:f8:d8:98:7a:4b:c3:16:44:
+        25:65:d4:a0:09:51:6d:be:17:cb:c3:89:31:e1:91:ee:1f:be:
+        ba:9a:5f:6c:f7:a6:36:4a:15:7b:5b:e0:0a:6f:bc:0d:a7:96:
+        72:e4:4f:ee:3a:9a:bb:c9:6c:26:d9:0b:eb:84:e7:55:d0:ef:
+        61:b6:c4:ba:48:17:50:68:ba:69:54:8f:1d:77:5f:70:ba:31:
+        4e:bc:8f:73:7e:62:fa:bc:ac:ac:8d:f1:87:39:94:50:2a:2a:
+        51:e4:27:f5:09:08:fb:43:64:69:34:cc:da:4a:4b:b3:91:ec:
+        0a:26:bb:af:f8:21:e8:1e:c9:fc:e5:6e:9f:7d:15:1a:e9:76:
+        c4:2b:ba:df
 -----BEGIN CERTIFICATE-----
-MIIDmzCCAoOgAwIBAgIBATANBgkqhkiG9w0BAQUFADAnMQswCQYDVQQGEwJFRTEY
-MBYGA1UEAxMPbGliZGlnaWRvY3BwIENBMB4XDTE0MDMyMzIzMTM0NloXDTI0MDMy
-MDIzMTM0NlowJzELMAkGA1UEBhMCRUUxGDAWBgNVBAMTD2xpYmRpZ2lkb2NwcCBD
-QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM8D1Twr+m/DT0d1HfYh
-1hfu8lPrkZJZgK5DYicsIULb6bWO5Nk+z6DFWl38kca5OOixVwGFPo3fdwulRiHL
-cEccpv0UPZDMk7e7PTPaaIKq20Sa3MjCOyuWEWe1mMa8bRWfO4hdwb71bGZQBJeS
-Xe/YdEZSdLAeuoPjGt+Qj67pAWRSbCuxT7+4/1i43O8gu0qHqpetsRMORmFJoRqE
-ZJTBaEy2TwhQVDfwxtKvte092a+DfdWU4yHnZ2hV485IYoPENX77BBfozjGkSPjw
-nLy+Fa8zhq46IqxKuES7qtydSXwTdPAD1bXeyufgwLoT0TNILQqRDYpB72ZW8iuZ
-Z7ECAwEAAaOB0TCBzjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAd
-BgNVHQ4EFgQUPsJJGbvIsF9JdKFutxdtIX28DAgwRQYDVR0lBD4wPAYIKwYBBQUH
-AwIGCCsGAQUFBwMBBggrBgEFBQcDAwYIKwYBBQUHAwQGCCsGAQUFBwMIBggrBgEF
-BQcDCTBFBggrBgEFBQcBAQQ5MDcwNQYIKwYBBQUHMAGGKWh0dHA6Ly93d3cub3Bl
-bnhhZGVzLm9yZy9jZ2ktYmluL29jc3AuY2dpMA0GCSqGSIb3DQEBBQUAA4IBAQCM
-XCziPqg/hYrxPWSHfFI0l4g25YWdZzs1d8jo/IYTIzZAElbhVfe/HB4Cmqlf2hOb
-EqLkGZjVU9sSP1ymYHzQqu7aUPagMrOzEo2Rwmwo7uwb4hA8zU0z/eW9Aqh2lHF7
-PeoxuwTvJYTlWkw2aAHsc7vWCiGYPAwZM59bJwkXy67mTR0zNkd8vsAYEZFSbv3c
-pQL80lPaSyZRHuG3z0T/EVo1rv6exNYBWXwQ83tVhBrXgJyrlYilDAC3CukWl/uJ
-gdsmQ6fROf0Eb58iFJXJykdajKeeEhQAQD619ey9dP1u+m2D9f/DezEmxHgXuX/R
-pgkhwFDSEJl3sAjxDXTf
+MIIDdzCCAl+gAwIBAgIBATANBgkqhkiG9w0BAQ0FADAnMQswCQYDVQQGEwJFRTEY
+MBYGA1UEAwwPbGliZGlnaWRvY3BwIENBMB4XDTI0MDMyMTA4NTI1OVoXDTM0MDMx
+OTA4NTI1OVowJzELMAkGA1UEBhMCRUUxGDAWBgNVBAMMD2xpYmRpZ2lkb2NwcCBD
+QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM2uqPaHhGQl+bKsVnIk
+STcn5mWtPJ0uSSDR2dW15FumfLi1F+PIHh0oGUqcAwKxUFhiJKSAn3tMhVFnBd7S
+Jx90fBhYGI+tLbJhg75TLOKoc9offmChT/pPZxhce5iXnUNhtjlDQuCjmkVAQj5M
+SyWJRGWS3INdPFuM3kQhvDEKXMSyVtC/bPKPGZpr+n2rYou+50T5lCIhBZE+SDDV
+ru1TLyP1+FW7rbeKNOuGCIsAFEdeZkahAY7E04H6V754D47lFDFNxp4Uazs3Qtvf
+Q0QRZ7qwUKBnokrgHkyZyyUE+nr3op9xRlTeDu5WVHu7viIue46Pt9xkmPVI3GMe
+cQUCAwEAAaOBrTCBqjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjA0
+BgNVHSUBAf8EKjAoBggrBgEFBQcDCQYIKwYBBQUHAwIGCCsGAQUFBwMEBggrBgEF
+BQcDATAdBgNVHQ4EFgQUCeZY+0v12yW7w+L2xpBX9uiVeCAwMgYIKwYBBQUHAQEE
+JjAkMCIGCCsGAQUFBzABhhZodHRwOi8vZGVtby5zay5lZS9vY3NwMA0GCSqGSIb3
+DQEBDQUAA4IBAQAltSvmioH3/cRbKAM/rokjWq2BhJqNYsOzrVf3Gs0go+r77lCB
+rsAIzrTHaYhnUMYFgqEszArJDTkaniFFtgqWn4uaWg3Iq4zNbkeJSe6jaoDsIux1
+M3kpVy4KBn7JfRT1Y1TkKHgRIgAk/EXEKc7BqEleeYhx+NiYekvDFkQlZdSgCVFt
+vhfLw4kx4ZHuH766ml9s96Y2ShV7W+AKb7wNp5Zy5E/uOpq7yWwm2QvrhOdV0O9h
+tsS6SBdQaLppVI8dd19wujFOvI9zfmL6vKysjfGHOZRQKipR5Cf1CQj7Q2RpNMza
+SkuzkewKJruv+CHoHsn85W6ffRUa6XbEK7rf
 -----END CERTIFICATE-----
diff --git a/test/data/gencerts.sh b/test/data/gencerts.sh
@@ -7,22 +7,22 @@ openssl req -out ca.req -new -newkey rsa:2048 -nodes -keyout ca.key -subj "/CN=l
 openssl ca -create_serial -out ca.crt -days 3650 -keyfile ca.key -selfsign -extensions v3_ca -config ./openssl.conf -infiles ca.req
 
 openssl req -out inter.req -new -newkey rsa:2048 -nodes -keyout inter.key -subj "/C=EE/CN=libdigidocpp Inter"
-openssl x509 -req -in inter.req -out inter.crt -CA ca.crt -CAkey ca.key -CAserial caserial.txt -extfile openssl.conf -extensions v3_inter -days 3650
+openssl x509 -req -in inter.req -out inter.crt -CA ca.crt -CAkey ca.key -CAserial caserial.txt -extfile openssl.conf -extensions v3_inter -days 3650 -sha512
 
 openssl req -out ocsp.req -new -newkey rsa:2048 -nodes -keyout ocsp.key -subj "/C=EE/CN=libdigidocpp OCSP"
-openssl x509 -req -in ocsp.req -out ocsp.crt -CA ca.crt -CAkey ca.key -CAserial caserial.txt -extfile openssl.conf -extensions v3_ocsp -days 3650
+openssl x509 -req -in ocsp.req -out ocsp.crt -CA ca.crt -CAkey ca.key -CAserial caserial.txt -extfile openssl.conf -extensions v3_ocsp -days 3650 -sha512
 # Server: openssl ocsp -index index.txt -CA ca.crt -rsigner ocsp.crt -rkey ocsp.key -port 8080
 # Client: openssl ocsp -issuer inter.crt -cert signer1.crt -url http://localhost:8080 -VAfile ocsp.crt -text
 
 for i in $(seq 1 3); do
 	openssl req -out signer$i.req -new -newkey rsa:2048 -nodes -keyout signer$i.key -subj "/C=EE/CN=signer$i"
-	openssl x509 -req -in signer$i.req -out signer$i.crt -CA inter.crt -CAkey inter.key -CAserial interserial.txt -extfile openssl.conf -extensions v3_usr -days 3650
-	openssl pkcs12 -export -nodes -in signer$i.crt -inkey signer$i.key -out signer$i.p12 -password pass:signer$i
+	openssl x509 -req -in signer$i.req -out signer$i.crt -CA inter.crt -CAkey inter.key -CAserial interserial.txt -extfile openssl.conf -extensions v3_usr -days 3650 -sha512
+	openssl pkcs12 -export -in signer$i.crt -inkey signer$i.key -out signer$i.p12 -password pass:signer$i
 done
 
 openssl req -out signerEC.req -new -newkey ec:<(openssl ecparam -name secp384r1) -nodes -keyout signerEC.key -subj "/C=EE/CN=signer EC"
-openssl x509 -req -in signerEC.req -out signerEC.crt -CA inter.crt -CAkey inter.key -CAserial interserial.txt -extfile openssl.conf -extensions v3_usr -days 3650
-openssl pkcs12 -export -nodes -in signerEC.crt -inkey signerEC.key -out signerEC.p12 -password pass:signerEC
+openssl x509 -req -in signerEC.req -out signerEC.crt -CA inter.crt -CAkey inter.key -CAserial interserial.txt -extfile openssl.conf -extensions v3_usr -days 3650 -sha512
+openssl pkcs12 -export -in signerEC.crt -inkey signerEC.key -out signerEC.p12 -password pass:signerEC
 
 openssl req -out unicode.req -new -newkey ec:<(openssl ecparam -name secp384r1) -nodes -keyout unicode.key -subj "/C=EE/CN=unicodeöäüõ" -utf8
-openssl x509 -req -in unicode.req -out unicode.crt -signkey unicode.key -days 365 
+openssl x509 -req -in unicode.req -out unicode.crt -signkey unicode.key -days 365 -sha512
diff --git a/test/data/inter.crt b/test/data/inter.crt
@@ -1,21 +1,22 @@
 -----BEGIN CERTIFICATE-----
-MIIDeDCCAmCgAwIBAgIBAzANBgkqhkiG9w0BAQUFADAnMQswCQYDVQQGEwJFRTEY
-MBYGA1UEAxMPbGliZGlnaWRvY3BwIENBMB4XDTE0MDMyMzIzMTM0OVoXDTI0MDMy
-MDIzMTM0OVowKjELMAkGA1UEBhMCRUUxGzAZBgNVBAMTEmxpYmRpZ2lkb2NwcCBJ
-bnRlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN6EPZ6Dg8D+VjK6
-lakSh1MdZzuunt0p/5EEJEW/wNJIPFK4CWTMDvYD1aiVP7Kh+WmJV+l3lck0vAyP
-UnPjXQrbucz0V+1DaBhOnairMhK04gJ2fYktNr90atyz/mQJroiyHdncToeW7iSb
-ro8d2P9BSLfIM6o/yjNasYAWfcrG4/biGTYW/YqN2fad605T8tLYgReNET84qFQV
-4L34mUdY8PLDg/kaJL6iYC337u5UfNl6qEdg1zU/8jD1c1YPL1duF+J2JK3YbLiz
-jKkBAQRGpY3Emk984lV6fQBfgCEwbO1yecOXL9jFXIGp9aZNjVLtQuPu/Yfz120r
-Mx8qlEcCAwEAAaOBqzCBqDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB
-BjAdBgNVHQ4EFgQUWp//2G24RVxM2GM5/6mJ9lYq2PEwHwYDVR0jBBgwFoAUPsJJ
-GbvIsF9JdKFutxdtIX28DAgwRQYIKwYBBQUHAQEEOTA3MDUGCCsGAQUFBzABhilo
-dHRwOi8vd3d3Lm9wZW54YWRlcy5vcmcvY2dpLWJpbi9vY3NwLmNnaTANBgkqhkiG
-9w0BAQUFAAOCAQEARxDvfF4LvUlAHhxzOEygk+gFishTUrzsaaZ9NFgo7yLrejjy
-zM3RRZQTkFfru9Xr0DmxCfh4pgFBHlW4csDmufQOFTtJTf3Qvuh+EnM+WGtMsNZa
-HwuEpVlI64WYgbM1UOD71BswvJ/drZ6b0xmlJQwjLMn6f8ET10w+eTcWF2rPfaod
-8Rj0JPSJPPLYm6FOgJzHuB3p4h+uBx2kh1a64PD3/jGvz8r2ZUHXdkQD+mz6UJPj
-6cxsmzcTu3k1RVX+kPgjQvJ6PjQQJyAL3UGYIb0cYZIcEZ3gHErtZ9HQS2zJXtlM
-rlnpwAWi3xiw015hz4KyPJvQOKxyX2/TIatCpA==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 -----END CERTIFICATE-----
diff --git a/test/data/openssl.conf b/test/data/openssl.conf
@@ -1,30 +1,33 @@
 [ v3_usr ]
 basicConstraints = CA:false
 subjectKeyIdentifier = hash
-authorityKeyIdentifier = keyid,issuer
+authorityKeyIdentifier = keyid, issuer
 authorityInfoAccess = OCSP;URI: http://demo.sk.ee/ocsp
-keyUsage=critical, digitalSignature, nonRepudiation
+keyUsage = critical, nonRepudiation
+certificatePolicies = 0.4.0.194112.1.2
 
 [ v3_inter ]
-basicConstraints = critical, CA:true
-keyUsage=critical, keyCertSign, cRLSign
+basicConstraints = critical, CA:true, pathlen:0
+keyUsage = critical, keyCertSign, cRLSign
+extendedKeyUsage = critical, OCSPSigning, clientAuth, emailProtection
 subjectKeyIdentifier = hash
-authorityKeyIdentifier = keyid,issuer
+authorityKeyIdentifier = keyid, issuer
 authorityInfoAccess = OCSP;URI: http://demo.sk.ee/ocsp
 
 [ v3_ocsp ]
-basicConstraints = CA:FALSE
+basicConstraints = CA:false
 subjectKeyIdentifier = hash
-authorityKeyIdentifier = keyid,issuer
+authorityKeyIdentifier = keyid, issuer
 keyUsage = nonRepudiation, digitalSignature, keyEncipherment
 extendedKeyUsage = OCSPSigning
 certificatePolicies = 1.0.14533.4.1.1
 
 [ v3_ca ]
 basicConstraints = critical, CA:true
-keyUsage=critical, keyCertSign, cRLSign
+keyUsage = critical, keyCertSign, cRLSign
+extendedKeyUsage = critical, OCSPSigning, clientAuth, emailProtection, serverAuth
 subjectKeyIdentifier = hash
-extendedKeyUsage=clientAuth, serverAuth, codeSigning, emailProtection, timeStamping, OCSPSigning
+authorityKeyIdentifier = keyid, issuer
 authorityInfoAccess = OCSP;URI: http://demo.sk.ee/ocsp
 
 [ ca ]
@@ -38,7 +41,7 @@ distinguished_name = req_distinguished_name
 [ CA_default ]
 new_certs_dir = .
 database = ./index
-default_md = sha1
+default_md = sha512
 policy = policy_match
 serial = ./caserial.txt
 private_key = cakey.pem

diff --git a/test/data/signer1.p12 b/test/data/signer1.p12
diff --git a/test/data/signer2.p12 b/test/data/signer2.p12
diff --git a/test/data/signer3.p12 b/test/data/signer3.p12
diff --git a/test/data/signerEC.p12 b/test/data/signerEC.p12
diff --git a/test/data/signerEC384.p12 b/test/data/signerEC384.p12
diff --git a/test/data/unicode.crt b/test/data/unicode.crt
@@ -1,11 +1,12 @@
 -----BEGIN CERTIFICATE-----
-MIIBhzCCAQwCFHwlKK7JnqHZRCECmbJz/7VNRNMEMAoGCCqGSM49BAMCMCcxCzAJ
-BgNVBAYTAkVFMRgwFgYDVQQDDA91bmljb2Rlw7bDpMO8w7UwHhcNMjMxMDA0MTM0
-MTM4WhcNMjQxMDAzMTM0MTM4WjAnMQswCQYDVQQGEwJFRTEYMBYGA1UEAwwPdW5p
-Y29kZcO2w6TDvMO1MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE6Sx6tkRnC2b/J91s
-mmL5VhrywL/kGcxJV+bX4ThM+zY3+P59VULwuhCFV3ShjC8Xt8I4iBIhMZQmBfIa
-s6jDI7oHxRQWUIG9BCAjnyEUDJIb7PvLRKmf2CsJhmfC+94yMAoGCCqGSM49BAMC
-A2kAMGYCMQD4jHmeKWn6YJ0D8S6+2TdFdkeawlD6yoL1HtOVxYxHmVu/wtbSAVM+
-R8uJeR8tg6oCMQDt43YaOQEKgX1T3kBn2Fna8ovhwOVBJUYlVWDW88Sm5qi+ilOn
-KRRV6XxGYDbwpRU=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 -----END CERTIFICATE-----