pineapple/externals/mbedtls/tests/data_files/dir4
2020-12-28 15:15:37 +00:00
..
cert11.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert12.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert13.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert14.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert21.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert22.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert23.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert31.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert32.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert33.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert34.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert41.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert42.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert43.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert44.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert45.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert51.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert52.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert53.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert54.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert61.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert62.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert63.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert71.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert72.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert73.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert74.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert81.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert82.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert83.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert91.crt early-access version 1255 2020-12-28 15:15:37 +00:00
cert92.crt early-access version 1255 2020-12-28 15:15:37 +00:00
Readme early-access version 1255 2020-12-28 15:15:37 +00:00

This directory contains the certificates for the tests targeting the enforcement of the policy indicated by the *pathLenConstraint* field. All leaf elements were generated with *is_ca* unset and all roots with the *selfsign=1* option. 

1. zero pathlen constraint on an intermediate CA (invalid)
```
cert11.crt -> cert12.crt (max_pathlen=0) -> cert13.crt -> cert14.crt
```

2. zero pathlen constraint on the root CA (invalid)
```
cert21.crt (max_pathlen=0) -> cert22.crt -> cert23.crt
```

3. nonzero pathlen constraint on the root CA (invalid)
```
cert31.crt (max_pathlen=1) -> cert32.crt -> cert33.crt -> cert34.crt
```

4. nonzero pathlen constraint on an intermediate CA (invalid)
```
cert41.crt -> cert42.crt (max_pathlen=1) -> cert43.crt -> cert44.crt -> cert45.crt 
```

5. nonzero pathlen constraint on an intermediate CA with maximum number of elements in the chain (valid)
```
cert51.crt -> cert52.crt (max_pathlen=1) -> cert53.crt -> cert54.crt
```

6. nonzero pathlen constraint on the root CA with maximum number of elements in the chain (valid)
```
cert61.crt (max_pathlen=1) -> cert62.crt -> cert63.crt
```

7. pathlen constraint on the root CA with maximum number of elements and a self signed certificate in the chain (valid) 
(This situation happens for example when a root of some hierarchy gets integrated into another hierarchy. In this case the certificates issued before the integration will have an intermadiate self signed certificate in their chain)
```
cert71.crt (max_pathlen=1) -> cert72.crt -> cert73.crt (self signed) -> cert74.crt -> cert74.crt
```

8. zero pathlen constraint on first intermediate CA (valid)
```
cert81.crt -> cert82.crt (max_pathlen=0) -> cert83.crt
```

9. zero pathlen constraint on trusted root (valid)
```
cert91.crt (max_pathlen=0) -> cert92.crt
```