mbedtls

yuzu/mbedtls

Fork 0

mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-05-22 02:32:23 +00:00

Commit graph

Author	SHA1	Message	Date
Manuel Pégourié-Gonnard	ecff9e9891	Add test for CA forgery attempt As we accept EE certs that are explicitly trusted (in the list of trusted roots) and usually look for parent by subject, and in the future we might want to avoid checking the self-signature on trusted certs, there could a risk that we incorrectly accept a cert that looks like a trusted root except it doesn't have the same key. This test ensures this will never happen.	2018-03-05 13:44:22 +01:00
Gilles Peskine	83ed596d62	Added SHA256 test certificates With SHA-1 deprecation, we need a few certificates using algorithms in the default support list. Most tests still use SHA-1 though. The generation process for the new certificates is recorded in the makefile.	2017-06-06 19:08:23 +02:00

Author

SHA1

Message

Date

Manuel Pégourié-Gonnard

ecff9e9891

Add test for CA forgery attempt

As we accept EE certs that are explicitly trusted (in the list of trusted
roots) and usually look for parent by subject, and in the future we might want
to avoid checking the self-signature on trusted certs, there could a risk that we
incorrectly accept a cert that looks like a trusted root except it doesn't
have the same key. This test ensures this will never happen.

2018-03-05 13:44:22 +01:00

Gilles Peskine

83ed596d62

Added SHA256 test certificates

With SHA-1 deprecation, we need a few certificates using algorithms in
the default support list. Most tests still use SHA-1 though.

The generation process for the new certificates is recorded in the makefile.

2017-06-06 19:08:23 +02:00

2 commits