Generate more certs/identities, and use them for better multi-cert test coverage

test/fixtures/keys/Makefile

@@ -1,5 +1,42 @@
-all: agent1-cert.pem agent2-cert.pem agent3-cert.pem agent4-cert.pem agent5-cert.pem ca2-crl.pem ec-cert.pem dh512.pem dh1024.pem dh2048.pem dsa1025.pem dsa_private_1025.pem dsa_public_1025.pem rsa_private_1024.pem rsa_private_2048.pem rsa_private_4096.pem rsa_public_1024.pem rsa_public_2048.pem rsa_public_4096.pem
-
+all: \
+  ca1-cert.pem \
+  ca2-cert.pem \
+  ca3-cert.pem \
+  ca4-cert.pem \
+  ca5-cert.pem \
+  ca6-cert.pem \
+  agent1-cert.pem \
+  agent1.pfx \
+  agent2-cert.pem \
+  agent3-cert.pem \
+  agent4-cert.pem \
+  ca2-crl.pem \
+  agent5-cert.pem \
+  agent6-cert.pem \
+  agent6.pfx \
+  agent7-cert.pem \
+  agent10-cert.pem \
+  agent10.pfx \
+  ec10-cert.pem \
+  ec10.pfx \
+  fake-cnnic-root-cert.pem \
+  dh1024.pem \
+  dh2048.pem \
+  dh512.pem \
+  dsa1025.pem \
+  dsa_private_1025.pem \
+  dsa_public_1025.pem \
+  ec-cert.pem \
+  rsa_private_1024.pem \
+  rsa_private_2048.pem \
+  rsa_private_4096.pem \
+  rsa_public_1024.pem \
+  rsa_public_2048.pem \
+  rsa_public_4096.pem \
+
+# 0-dns-cert.pem contains an subjectAlternativeName with an embedded NUL, and
+# cannot be created with standard openssl tooling, which is why it is missing
+# from this file.
 
 #
 # Create Certificate Authority: ca1
@@ -18,7 +55,7 @@ ca2-cert.pem: ca2.cnf
 	touch ca2-database.txt
 
 #
-# Create Subordinate Certificate Authority: ca3
+# Create Subordinate Certificate Authority: ca3 issued by ca1
 # ('password' is used for the CA password.)
 #
 ca3-key.pem:
@@ -43,6 +80,80 @@ ca3-cert.pem: ca3-csr.pem ca3-key.pem ca3.cnf ca1-cert.pem ca1-key.pem
 		-CAcreateserial \
 		-out ca3-cert.pem
 
+#
+# Create Subordinate Certificate Authority: ca4 issued by ca2
+# ('password' is used for the CA password.)
+#
+ca4-key.pem:
+	openssl genrsa -out ca4-key.pem 1024
+
+ca4-csr.pem: ca4.cnf ca4-key.pem
+	openssl req -new \
+		-extensions v3_ca \
+		-config ca4.cnf \
+		-key ca4-key.pem \
+		-out ca4-csr.pem
+
+ca4-cert.pem: ca4-csr.pem ca4-key.pem ca4.cnf ca2-cert.pem ca2-key.pem
+	openssl x509 -req \
+		-extfile ca4.cnf \
+		-extensions v3_ca \
+		-days 9999 \
+		-passin "pass:password" \
+		-in ca4-csr.pem \
+		-CA ca2-cert.pem \
+		-CAkey ca2-key.pem \
+		-CAcreateserial \
+		-out ca4-cert.pem
+
+#
+# Create Certificate Authority: ca5 with ECC
+# ('password' is used for the CA password.)
+#
+ca5-key.pem:
+	openssl ecparam -genkey -out ca5-key.pem -name prime256v1
+
+ca5-csr.pem: ca5-key.pem
+	openssl req -new \
+		-config ca5.cnf \
+		-key ca5-key.pem \
+		-out ca5-csr.pem
+
+ca5-cert.pem: ca5.cnf ca5-key.pem ca5-csr.pem
+	openssl x509 -req \
+		-extfile ca5.cnf \
+		-days 9999 \
+		-passin "pass:password" \
+		-in ca5-csr.pem \
+		-signkey ca5-key.pem \
+		-out ca5-cert.pem
+
+#
+# Create Subordinate Certificate Authority: ca6 issued by ca5 with ECC
+# ('password' is used for the CA password.)
+#
+ca6-key.pem:
+	openssl ecparam -genkey -out ca6-key.pem -name prime256v1
+
+ca6-csr.pem: ca6.cnf ca6-key.pem
+	openssl req -new \
+		-extensions v3_ca \
+		-config ca6.cnf \
+		-key ca6-key.pem \
+		-out ca6-csr.pem
+
+ca6-cert.pem: ca6-csr.pem ca6-key.pem ca6.cnf ca5-cert.pem ca5-key.pem
+	openssl x509 -req \
+		-extfile ca6.cnf \
+		-extensions v3_ca \
+		-days 9999 \
+		-passin "pass:password" \
+		-in ca6-csr.pem \
+		-CA ca5-cert.pem \
+		-CAkey ca5-key.pem \
+		-CAcreateserial \
+		-out ca6-cert.pem
+
 #
 # Create Fake CNNIC Root Certificate Authority: fake-cnnic-root
 #
@@ -93,13 +204,13 @@ agent1-cert.pem: agent1-csr.pem ca1-cert.pem ca1-key.pem
 		-CAcreateserial \
 		-out agent1-cert.pem
 
-agent1-pfx.pem: agent1-cert.pem agent1-key.pem ca1-cert.pem
+agent1.pfx: agent1-cert.pem agent1-key.pem ca1-cert.pem
 	openssl pkcs12 -export \
 		-descert \
 		-in agent1-cert.pem \
 		-inkey agent1-key.pem \
 		-certfile ca1-cert.pem \
-		-out agent1-pfx.pem \
+		-out agent1.pfx \
 		-password pass:sample
 
 agent1-verify: agent1-cert.pem ca1-cert.pem
@@ -220,7 +331,7 @@ agent5-verify: agent5-cert.pem ca2-cert.pem
 	openssl verify -CAfile ca2-cert.pem agent5-cert.pem
 
 #
-# agent6 is signed by ca3
+# agent6 is a client RSA cert signed by ca3
 #
 
 agent6-key.pem:
@@ -244,6 +355,15 @@ agent6-cert.pem: agent6-csr.pem ca3-cert.pem ca3-key.pem
 agent6-verify: agent6-cert.pem ca3-cert.pem
 	openssl verify -CAfile ca3-cert.pem agent6-cert.pem
 
+agent6.pfx: agent6-cert.pem agent6-key.pem ca1-cert.pem
+	openssl pkcs12 -export \
+		-descert \
+		-in agent6-cert.pem \
+		-inkey agent6-key.pem \
+		-certfile ca1-cert.pem \
+		-out agent6.pfx \
+		-password pass:sample
+
 #
 # agent7 is signed by fake-cnnic-root.
 #
@@ -322,6 +442,74 @@ agent9-cert.pem: agent9-csr.pem
 		-startdate 20161021000001Z \
 		-notext -out agent9-cert.pem
 
+# agent10 is a server RSA cert signed by ca4 for agent10.example.com
+#
+
+agent10-key.pem:
+	openssl genrsa -out agent10-key.pem 1024
+
+agent10-csr.pem: agent10.cnf agent10-key.pem
+	openssl req -new -config agent10.cnf -key agent10-key.pem -out agent10-csr.pem
+
+agent10-cert.pem: agent10-csr.pem ca4-cert.pem ca4-key.pem
+	openssl x509 -req \
+		-days 9999 \
+		-passin "pass:password" \
+		-in agent10-csr.pem \
+		-CA ca4-cert.pem \
+		-CAkey ca4-key.pem \
+		-CAcreateserial \
+		-extfile agent10.cnf \
+		-out agent10-cert.pem
+	cat ca4-cert.pem >> agent10-cert.pem
+
+agent10-verify: agent10-cert.pem ca4-cert.pem
+	openssl verify -CAfile ca4-cert.pem agent10-cert.pem
+
+agent10.pfx: agent10-cert.pem agent10-key.pem ca1-cert.pem
+	openssl pkcs12 -export \
+		-descert \
+		-in agent10-cert.pem \
+		-inkey agent10-key.pem \
+		-certfile ca1-cert.pem \
+		-out agent10.pfx \
+		-password pass:sample
+
+#
+# ec10 is a server EC cert signed by ca6 for agent10.example.com
+#
+
+ec10-key.pem:
+	openssl ecparam -genkey -out ec10-key.pem -name prime256v1
+
+ec10-csr.pem: ec10-key.pem
+	openssl req -new -config agent10.cnf -key ec10-key.pem -out ec10-csr.pem
+
+ec10-cert.pem: ec10-csr.pem ec10-key.pem
+	openssl x509 -req \
+		-days 9999 \
+		-passin "pass:password" \
+		-in ec10-csr.pem \
+		-CA ca6-cert.pem \
+		-CAkey ca6-key.pem \
+		-CAcreateserial \
+		-extfile agent10.cnf \
+		-out ec10-cert.pem
+	cat ca6-cert.pem >> ec10-cert.pem
+
+ec10.pfx: ec10-cert.pem ec10-key.pem ca6-cert.pem
+	openssl pkcs12 -export \
+		-descert \
+		-in ec10-cert.pem \
+		-inkey ec10-key.pem \
+		-certfile ca6-cert.pem \
+		-out ec10.pfx \
+		-password pass:sample
+
+
+#
+# ec is a self-signed EC cert for CN "agent2"
+#
 ec-key.pem:
 	openssl ecparam -genkey -out ec-key.pem -name prime256v1
 
@@ -384,5 +572,7 @@ clean:
 
 test: agent1-verify agent2-verify agent3-verify agent4-verify agent5-verify
 
+%-cert.pem.print: %-cert.pem
+	openssl x509 -in $< -text -noout > $@
 
-.PHONY: all clean test agent1-verify agent2-verify agent3-verify agent4-verify agent5-verify
+.PHONY: all clean test agent1-verify agent2-verify agent3-verify agent4-verify agent5-verify agent6-verify agent7-verify agent8-verify agent10-verify

test/fixtures/keys/agent10-cert.pem

@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----
+MIICXjCCAcegAwIBAgIJAP2fmGveC9mRMA0GCSqGSIb3DQEBCwUAMHoxCzAJBgNV
+BAYTAlVTMQswCQYDVQQIDAJDQTELMAkGA1UEBwwCU0YxDzANBgNVBAoMBkpveWVu
+dDEQMA4GA1UECwwHTm9kZS5qczEMMAoGA1UEAwwDY2E0MSAwHgYJKoZIhvcNAQkB
+FhFyeUB0aW55Y2xvdWRzLm9yZzAeFw0xNzAyMTQxNzI3NDlaFw00NDA3MDExNzI3
+NDlaMGgxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDQTELMAkGA1UEBwwCU0YxDzAN
+BgNVBAoMBkpveWVudDEQMA4GA1UECwwHTm9kZS5qczEcMBoGA1UEAwwTYWdlbnQx
+MC5leGFtcGxlLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA2u9KDRih
+b+1xQgUW8AR+6iDuiJ5okn8MHjYlAkN0ykjGQWAajffSuMphE4gdt0qK+2j343B5
+lyQhA05VzKo4coeDbQthb/FvaO/a9YTwSV6/UOq3RUxoP5gYS4LTpT+7/J0YQnrX
+WZnNW1Q0vzOamGLkQu6EEMu7bnyo6csILG8CAwEAATANBgkqhkiG9w0BAQsFAAOB
+gQBdX03nGFuNJecIBOyXwtEikoUM5K4O+6LG5LQ09Td6RsIxI9bHAPwoNVLdFbff
+qKfw02LM9juotE8gofFkEgVVokNwOVcTxUJjwIkUrD0/UB6YAmkcnGXyhRrdHqqp
+fKkzn1oYm3TKlS5uZsmX4dsayP1Jqex1Qpi1ni0pdQsKYA==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/agent10-csr.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/agent10-key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent10.cnf

@@ -0,0 +1,17 @@
+[ req ]
+default_bits           = 1024
+days                   = 999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = Joyent
+OU                     = Node.js
+CN                     = agent10.example.com
+
+[ req_attributes ]
+challengePassword              = A challenge password

test/fixtures/keys/ca1-cert.srl

@@ -1 +1 @@
-9A84ABCFB8A72AC0
+9A84ABCFB8A72AC1

test/fixtures/keys/ca2-cert.srl

@@ -1 +1 @@
-EEBE2CE5211A12FB
+EEBE2CE5211A12FF

test/fixtures/keys/ca4-cert.pem

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/ca4-cert.srl

@@ -0,0 +1 @@
+FD9F986BDE0BD991

test/fixtures/keys/ca4-csr.pem

@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/ca4-key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIICWwIBAAKBgQDWU8RJblGELpV9hIskzJ7mcQnKgE8HCApImbJnmX2VZ8z1XYh7
+GQjka069U+UX8vEbKSlMRTFz3UwyuF/gxaVguDX6s2altSaK19mT12igdl6MluxJ
+NNIvF11aE0EZZNlKEnlUoCwQYP5Jb6bkYVYgkzhsb5iAOyxdDUUlIqfyywIDAQAB
+AoGABzRbpchCjzntpoF9F+iU8tQb6yWzAl5/0f7wo1DiitIpbpoNS24FAYCl7fFT
+AyIUfsA8dibhSa7Hr/DIsEqUi4L65+avHz88yWXzAa2eodUF6Rn6D0G4osxg8C6d
+KR5h6u1BTJ3/MB4x8CTLu2fxEV0hntMX8+1YSTIioy9VueECQQD8ebR3NwSIuAWv
++571Bw49ZtiIx+gVNbcIbVsWxdg2JAS80CBMnPrpps1J2ZQNeVkD0aRtXk4pXmuL
+BdxfF0YbAkEA2VG6Xyk/DftnNJpAk8pV870814HH/ZNYN2hRxsE9v9gYsRaRfREa
+pqF34QXh2ri4bissU7aIYBocdKuqnKWREQJAN0Y96Eu3Rmdjd1/TMTnWOEMn7Oo3
+OU2FQOcQJjAyYcgI8X1vVNaZaEYIc76a10hV4KwpH3iiDBSL3uftkzP5OQJAdPl0
+4/wDoLcN2ladI+/pTAU0VpvY1jkVZt2UBvPFFRpwUAHh1fv66G5JZKoR4/VB8Kr0
+dSrvRStI3dP5RdAowQJAfy93AFGDYTMmBSkHbTfo2jQDwTGExvLyf3YVLszPFvRY
+7AYZ4E5qto47Bg8ZEM5jL1M8aZKQb6eq9xQaXkmJtg==
+-----END RSA PRIVATE KEY-----