- djm@cvs.openbsd.org 2014/06/24 01:04:43

[regress/krl.sh] regress test for broken consecutive revoked serial number ranges
2014-07-02 17:02:03 +10:00 · 2014-07-02 17:02:03 +10:00 · c1dc24b71f
parent 43d3ed2dd3
commit c1dc24b71f
2 changed files with 7 additions and 1 deletions
--- a/3
+++ b/3
@ -84,6 +84,9 @@
   - djm@cvs.openbsd.org 2014/05/21 07:04:21
     [regress/integrity.sh]
     when failing because of unexpected output, show the offending output
+   - djm@cvs.openbsd.org 2014/06/24 01:04:43
+     [regress/krl.sh]
+     regress test for broken consecutive revoked serial number ranges

 20140618
 - (tim) [openssh/session.c] Work around to get chroot sftp working on UnixWare
--- a/regress/krl.sh
+++ b/regress/krl.sh
@ -1,4 +1,4 @@
-#	$OpenBSD: krl.sh,v 1.2 2013/11/21 03:15:46 djm Exp $
+#	$OpenBSD: krl.sh,v 1.3 2014/06/24 01:04:43 djm Exp $
 #	Placed in the Public Domain.

 tid="key revocation lists"
@ -37,6 +37,9 @@ serial: 700-797
 serial: 798
 serial: 799
 serial: 599-701
+# Some multiple consecutive serial number ranges
+serial: 10000-20000
+serial: 30000-40000
 EOF

 # A specification that revokes some certificated by key ID.