mbedtls/tests
Gilles Peskine da118e130d Regenerate test client certificates with a PrintableString issuer
The test certificate used for clients in compat.sh, cert_sha256.crt,
had the issuer ON and CN encoded as UTF8String, but the corresponding
CA certificate test-ca_cat12.crt had them encoded as PrintableString.
The strings matched, which is sufficient according to RFC 5280 §7.1
and RFC 4518 §2.1. However, GnuTLS 3.4.10 requires the strings to have
the same encoding, so it did not accept that the certificate issued by
UTF8String "PolarSSL Test CA" was validly issued by the
PrintableString "PolarSSL Test CA" CA.

ebc1f40aa0, merged via
https://github.com/ARMmbed/mbedtls/pull/1641 and released in Mbed TLS
2.14, updated these certificates.
4f928c0f37 merged, via
https://github.com/ARMmbed/mbedtls/pull/2418 fixed this in the 2.7 LTS
branch for the SHA-1 certificate which was used at the time. The
present commit applies the same fix for the SHA-256 certificate that
is now in use.

For uniformity, this commit regenerates all the cert_*.crt.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2020-08-21 19:15:51 +02:00
..
.jenkins Add Jenkinsfile for PR job 2018-10-19 15:25:57 +01:00
configs Update copyright notices to use Linux Foundation guidance 2020-08-19 16:54:51 +02:00
data_files Regenerate test client certificates with a PrintableString issuer 2020-08-21 19:15:51 +02:00
git-scripts Fix license header in pre-commit hook 2020-08-20 09:27:07 +02:00
scripts Update copyright notices to use Linux Foundation guidance 2020-08-19 16:54:51 +02:00
suites Regenerate test client certificates with a PrintableString issuer 2020-08-21 19:15:51 +02:00
.gitignore Move some ignore patterns to subdirectories 2015-01-28 15:33:23 +00:00
CMakeLists.txt Add a facility to skip running some test suites 2018-12-14 18:50:34 +01:00
compat.sh compat.sh: stop using allow_sha1 2020-08-21 13:42:29 +02:00
Descriptions.txt Add selftest program to the list of tests 2014-04-04 16:33:01 +02:00
Makefile Merge remote-tracking branch 'origin/pr/2320' into mbedtls-2.7 2019-06-21 15:55:21 +01:00
ssl-opt.sh Update copyright notices to use Linux Foundation guidance 2020-08-19 16:54:51 +02:00