mirror of
https://github.com/acidanthera/audk.git
synced 2025-04-08 17:05:09 +02:00
f536d7c3ed
The old TestRoot certificate used for Pkcs7Sign is not compliant to Root CA certificate requirement with incorrect basic constraints and key usage setting. When OpenSSL in CryptoPkg was updated from 1.0.2xx to the latest 1.1.0xx, the CA certificate checking was enforced for more extension validations, which will raise the verification failure when stilling using the old sample certificates. This patch re-generated one set of test certificates used in Pkcs7Sign demo, and updated the corresponding Readme.md to describe how to set the options in openssl configuration file. Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Eric Dong <eric.dong@intel.com> Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Long Qin <qin.long@intel.com> Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
60 lines
3.2 KiB
Plaintext
60 lines
3.2 KiB
Plaintext
Certificate:
|
|
Data:
|
|
Version: 3 (0x2)
|
|
Serial Number: 4098 (0x1002)
|
|
Signature Algorithm: sha256WithRSAEncryption
|
|
Issuer: C = CN, ST = SH, L = SH, O = TianoCore, OU = EDKII, CN = TestRoot, emailAddress = edkii@tianocore.org
|
|
Validity
|
|
Not Before: Apr 10 08:33:45 2017 GMT
|
|
Not After : Apr 10 08:33:45 2018 GMT
|
|
Subject: C = CN, ST = SH, O = TianoCore, OU = EDKII, CN = TestSub, emailAddress = edkii@tianocore.org
|
|
Subject Public Key Info:
|
|
Public Key Algorithm: rsaEncryption
|
|
Public-Key: (2048 bit)
|
|
Modulus:
|
|
00:c5:3a:af:16:34:9a:14:61:74:8c:39:1a:04:1f:
|
|
7b:95:d3:40:b7:ea:26:a7:7b:8d:76:d3:86:1b:7c:
|
|
07:17:d2:56:72:36:13:b4:6c:75:b7:bf:d1:35:d1:
|
|
31:d5:9a:07:c1:62:4e:aa:3d:bd:d8:40:8b:48:9a:
|
|
c5:46:c4:c3:10:2c:d4:82:d9:6d:f4:c3:de:85:fa:
|
|
34:1d:d1:74:7a:5f:16:34:59:2b:2b:03:61:46:62:
|
|
d7:88:62:59:4d:d8:55:00:52:54:e1:15:5e:a9:ec:
|
|
d6:e8:51:fd:ef:8e:68:5f:d2:40:d2:61:ef:2c:1d:
|
|
5b:a7:6e:14:4c:12:bc:60:81:8e:66:c9:84:51:c2:
|
|
89:51:fc:e5:7f:86:9a:78:a4:c1:f7:0f:a9:a5:97:
|
|
60:dd:6f:c8:a0:fd:ea:07:2f:01:36:0a:e8:bd:0e:
|
|
dc:48:2e:85:22:7b:bb:db:68:78:eb:cd:6a:54:07:
|
|
f7:81:a5:52:8f:f3:5c:09:1e:76:a3:d1:91:8f:ee:
|
|
86:2c:85:49:99:96:4f:5f:5b:0d:08:ae:d8:20:e8:
|
|
e3:67:70:c6:ec:0e:0e:bd:bf:3c:f6:db:e4:45:d5:
|
|
7a:bb:9f:d1:3b:18:89:fc:63:ac:c2:30:b8:fa:bb:
|
|
8a:24:63:4e:79:58:78:72:ab:27:36:3d:bb:4f:47:
|
|
d6:ef
|
|
Exponent: 65537 (0x10001)
|
|
X509v3 extensions:
|
|
X509v3 Subject Key Identifier:
|
|
D6:9D:66:D6:49:7C:FA:20:8D:5D:75:69:2A:41:0A:7A:03:5A:A5:EB
|
|
X509v3 Authority Key Identifier:
|
|
keyid:16:AA:D6:8E:1B:2D:43:F3:2D:B0:24:AD:36:65:3F:B2:FA:B1:2C:ED
|
|
|
|
X509v3 Basic Constraints: critical
|
|
CA:TRUE
|
|
X509v3 Key Usage: critical
|
|
Digital Signature, Certificate Sign, CRL Sign
|
|
Signature Algorithm: sha256WithRSAEncryption
|
|
83:3c:ae:b2:fc:99:3d:33:b3:da:ca:26:83:8c:a9:ae:f8:bb:
|
|
ad:05:37:97:a5:f8:0d:2b:4e:3e:e5:b7:12:68:f8:64:d4:bd:
|
|
ff:65:7d:57:98:61:cd:47:10:a5:6a:bd:66:89:74:ce:5e:28:
|
|
29:39:67:c9:1f:54:ec:78:76:b1:dd:04:91:63:b6:8c:2f:86:
|
|
59:1f:c4:2b:a1:4a:8c:a8:5b:f6:8a:92:f0:83:bb:92:92:5c:
|
|
b1:1c:18:95:3d:d6:be:6d:79:9d:4f:7b:92:1f:68:f5:1f:cd:
|
|
f4:37:2d:1e:e3:f6:eb:f2:8a:a4:8d:a1:c5:db:0c:3a:59:01:
|
|
dc:be:a9:c1:0b:04:ba:e8:02:a9:85:cd:d7:48:0d:f6:60:30:
|
|
2b:05:ba:e0:c7:d8:9f:23:14:37:04:0a:a7:bc:b6:c8:25:31:
|
|
e4:9a:41:a5:83:c2:ee:89:d3:fa:a5:7c:ae:a6:14:22:a4:5f:
|
|
73:03:f2:7b:3c:51:f7:76:2a:0a:cf:ee:71:35:1c:bc:ff:3f:
|
|
9b:d5:b1:33:e0:b6:fc:2a:c8:ab:84:89:cd:fa:1c:ee:12:8c:
|
|
07:ba:93:46:50:b3:3f:73:05:be:67:58:60:90:05:2c:d3:b6:
|
|
19:7c:a4:f0:6e:ee:d4:f2:0e:f5:02:79:5f:2c:28:83:1e:83:
|
|
c6:92:ba:7c
|