2362N/A * Copyright (c) 2009, Oracle and/or its affiliates. All rights reserved. 953N/A * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. 953N/A * This code is free software; you can redistribute it and/or modify it 953N/A * under the terms of the GNU General Public License version 2 only, as 953N/A * published by the Free Software Foundation. 953N/A * This code is distributed in the hope that it will be useful, but WITHOUT 953N/A * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or 953N/A * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License 953N/A * version 2 for more details (a copy is included in the LICENSE file that 953N/A * accompanied this code). 953N/A * You should have received a copy of the GNU General Public License version 953N/A * 2 along with this work; if not, write to the Free Software Foundation, 953N/A * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. 2362N/A * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA 2362N/A * or visit www.oracle.com if you need additional information or have any 953N/A * @summary CRL revoked certificate failures masked by OCSP failures 953N/A * Note that the certificate validity is from Mar 16 14:55:35 2009 GMT to 953N/A * Dec 1 14:55:35 2028 GMT, please update it with newer certificate if 953N/A * Certificates used in the test. 953N/A * end entity certificate: 953N/A * Serial Number: 25 (0x19) 953N/A * Signature Algorithm: md5WithRSAEncryption 953N/A * Issuer: C=US, ST=Some-State, L=Some-City, O=Some-Org 953N/A * Not Before: Mar 16 14:55:35 2009 GMT 953N/A * Not After : Dec 1 14:55:35 2028 GMT 953N/A * Subject: C=US, ST=Some-State, L=Some-City, O=Some-Org, OU=SSL-Client, 953N/A * Subject Public Key Info: 953N/A * Public Key Algorithm: rsaEncryption 953N/A * RSA Public Key: (1024 bit) 953N/A * 00:bb:f0:40:36:ac:26:54:4e:f4:a3:5a:00:2f:69: 953N/A * 21:6f:b9:7a:3a:93:ec:a2:f6:e1:8e:c7:63:d8:2f: 953N/A * 12:30:99:2e:b0:f2:8f:f8:27:2d:24:78:28:84:f7: 953N/A * 01:bf:8d:44:79:dd:3b:d2:55:f3:ce:3c:b2:5b:21: 953N/A * 7d:ef:fd:33:4a:b1:a3:ff:c6:c8:9b:b9:0f:7c:41: 953N/A * 35:97:f9:db:3a:05:60:05:15:af:59:17:92:a3:10: 953N/A * ad:16:1c:e4:07:53:af:a8:76:a2:56:2a:92:d3:f9: 953N/A * 28:e0:78:cf:5e:1f:48:ab:5c:19:dd:e1:67:43:ba: 953N/A * 75:8d:f5:82:ac:43:92:44:1b 953N/A * Exponent: 65537 (0x10001) 953N/A * X509v3 Basic Constraints: 953N/A * Digital Signature, Non Repudiation, Key Encipherment 953N/A * X509v3 Subject Key Identifier: 953N/A * CD:BB:C8:85:AA:91:BD:FD:1D:BE:CD:67:7C:FF:B3:E9:4C:A8:22:E6 953N/A * X509v3 Authority Key Identifier: 953N/A * keyid:FA:B9:51:BF:4C:E7:D9:86:98:33:F9:E7:CB:1E:F1:33:49:F7:A8:14 953N/A * Signature Algorithm: md5WithRSAEncryption 953N/A * trusted certificate authority: 953N/A * Serial Number: 0 (0x0) 953N/A * Signature Algorithm: md5WithRSAEncryption 953N/A * Issuer: C=US, ST=Some-State, L=Some-City, O=Some-Org 953N/A * Not Before: Dec 8 02:43:36 2008 GMT 953N/A * Not After : Aug 25 02:43:36 2028 GMT 953N/A * Subject: C=US, ST=Some-State, L=Some-City, O=Some-Org 953N/A * Subject Public Key Info: 953N/A * Public Key Algorithm: rsaEncryption 953N/A * RSA Public Key: (1024 bit) 953N/A * 00:cb:c4:38:20:07:be:88:a7:93:b0:a1:43:51:2d: 953N/A * d7:8e:85:af:54:dd:ad:a2:7b:23:5b:cf:99:13:53: 953N/A * 99:45:7d:ee:6d:ba:2d:bf:e3:ad:6e:3d:9f:1a:f9: 953N/A * 03:97:e0:17:55:ae:11:26:57:de:01:29:8e:05:3f: 953N/A * 21:f7:e7:36:e8:2e:37:d7:48:ac:53:d6:60:0e:c7: 953N/A * 50:6d:f6:c5:85:f7:8b:a6:c5:91:35:72:3c:94:ee: 953N/A * f1:17:f0:71:e3:ec:1b:ce:ca:4e:40:42:b0:6d:ee: 953N/A * 6a:0e:d6:e5:ad:3c:0f:c9:ba:82:4f:78:f8:89:97: 953N/A * 89:2a:95:12:4c:d8:09:2a:e9 953N/A * Exponent: 65537 (0x10001) 953N/A * X509v3 Subject Key Identifier: 953N/A * FA:B9:51:BF:4C:E7:D9:86:98:33:F9:E7:CB:1E:F1:33:49:F7:A8:14 953N/A * X509v3 Authority Key Identifier: 953N/A * keyid:FA:B9:51:BF:4C:E7:D9:86:98:33:F9:E7:CB:1E:F1:33:49:F7:A8:14 953N/A * DirName:/C=US/ST=Some-State/L=Some-City/O=Some-Org 953N/A * X509v3 Basic Constraints: 953N/A * Signature Algorithm: md5WithRSAEncryption 953N/A * Certificate Revocation List (CRL): 953N/A * Signature Algorithm: md5WithRSAEncryption 953N/A * Issuer: /C=US/ST=Some-State/L=Some-City/O=Some-Org 953N/A * Last Update: Mar 16 16:27:14 2009 GMT 953N/A * Next Update: May 15 16:27:14 2028 GMT 953N/A * Revoked Certificates: 953N/A * Revocation Date: Mar 16 16:22:08 2009 GMT 953N/A * CRL entry extensions: 953N/A * X509v3 CRL Reason Code: 953N/A * Signature Algorithm: md5WithRSAEncryption 953N/A "-----BEGIN CERTIFICATE-----\n" +
953N/A "MIICrDCCAhWgAwIBAgIBADANBgkqhkiG9w0BAQQFADBJMQswCQYDVQQGEwJVUzET\n" +
953N/A "MBEGA1UECBMKU29tZS1TdGF0ZTESMBAGA1UEBxMJU29tZS1DaXR5MREwDwYDVQQK\n" +
953N/A "EwhTb21lLU9yZzAeFw0wODEyMDgwMjQzMzZaFw0yODA4MjUwMjQzMzZaMEkxCzAJ\n" +
953N/A "BgNVBAYTAlVTMRMwEQYDVQQIEwpTb21lLVN0YXRlMRIwEAYDVQQHEwlTb21lLUNp\n" +
953N/A "dHkxETAPBgNVBAoTCFNvbWUtT3JnMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB\n" +
953N/A "gQDLxDggB76Ip5OwoUNRLdeOha9U3a2ieyNbz5kTU5lFfe5tui2/461uPZ8a+QOX\n" +
953N/A "4BdVrhEmV94BKY4FPyH35zboLjfXSKxT1mAOx1Bt9sWF94umxZE1cjyU7vEX8HHj\n" +
953N/A "hpgz+efLHvEzSfeoFKFNpEswSTELMAkGA1UEBhMCVVMxEzARBgNVBAgTClNvbWUt\n" +
953N/A "U3RhdGUxEjAQBgNVBAcTCVNvbWUtQ2l0eTERMA8GA1UEChMIU29tZS1PcmeCAQAw\n" +
953N/A "6Mvf0r1PNTY2hwTJLJmKtg==\n" +
953N/A "-----END CERTIFICATE-----";
953N/A "-----BEGIN CERTIFICATE-----\n" +
953N/A "MIICizCCAfSgAwIBAgIBGTANBgkqhkiG9w0BAQQFADBJMQswCQYDVQQGEwJVUzET\n" +
953N/A "MBEGA1UECBMKU29tZS1TdGF0ZTESMBAGA1UEBxMJU29tZS1DaXR5MREwDwYDVQQK\n" +
953N/A "EwhTb21lLU9yZzAeFw0wOTAzMTYxNDU1MzVaFw0yODEyMDExNDU1MzVaMHIxCzAJ\n" +
953N/A "BgNVBAYTAlVTMRMwEQYDVQQIEwpTb21lLVN0YXRlMRIwEAYDVQQHEwlTb21lLUNp\n" +
953N/A "dHkxETAPBgNVBAoTCFNvbWUtT3JnMRMwEQYDVQQLEwpTU0wtQ2xpZW50MRIwEAYD\n" +
953N/A "VQQDEwlsb2NhbGhvc3QwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALvwQDas\n" +
953N/A "8848slshfe/9M0qxo//GyJu5D3xBNZf52zoFYAUVr1kXkqMQrRYc5AdTr6h2olYq\n" +
953N/A "ktP5KOB4z14fSKtcGd3hZ0O6dY31gqxDkkQbAgMBAAGjWjBYMAkGA1UdEwQCMAAw\n" +
953N/A "p7JjCDOrMBNun46xs4Gz7Y4ygM5VHaFP0oO7369twvRSu0pCuIdZd5OIMPFeRqQw\n" +
953N/A "PimQ7rbxRAofPECv20IUKFBbOUkU+gFcn+WbTKYxBw==\n" +
953N/A "-----END CERTIFICATE-----";
953N/A "-----BEGIN X509 CRL-----\n" +
953N/A "MIIBRTCBrwIBATANBgkqhkiG9w0BAQQFADBJMQswCQYDVQQGEwJVUzETMBEGA1UE\n" +
953N/A "CBMKU29tZS1TdGF0ZTESMBAGA1UEBxMJU29tZS1DaXR5MREwDwYDVQQKEwhTb21l\n" +
953N/A "LU9yZxcNMDkwMzE2MTYyNzE0WhcNMjgwNTE1MTYyNzE0WjAiMCACARkXDTA5MDMx\n" +
953N/A "NjE2MjIwOFowDDAKBgNVHRUEAwoBBKAOMAwwCgYDVR0UBAMCAQIwDQYJKoZIhvcN\n" +
953N/A "dGPuUkglWdrGdxY9MNRUj2YFNfdZi6zZ7JF6XbkDHYOAKYgPDJRjS/0VcBntn5RJ\n" +
953N/A "sQfZsBqc9fFSP8gknRRn3LT41kr9xNRxTT1t3YYjv7J3zkMYyInqeUA=\n" +
953N/A "-----END X509 CRL-----";
953N/A // generate certificate from cert strings 953N/A // generate certification path 953N/A // generate certificate from cert string 953N/A // generate a trust anchor 953N/A // generate CRL from CRL string 953N/A // generate a cert store 953N/A // Activate certificate revocation checking 953N/A // Ensure that the ocsp.responderURL property is not set. 953N/A "unexpect exception, should be a REVOKED CPVE",
cpve);