author | jnimeh |
Thu, 22 Aug 2019 14:09:36 -0700 | |
changeset 57849 | e1269de19aa5 |
permissions | -rw-r--r-- |
57849
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
1 |
/* |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
2 |
* Copyright (c) 2019, Oracle and/or its affiliates. All rights reserved. |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
3 |
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
4 |
* |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
5 |
* This code is free software; you can redistribute it and/or modify it |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
6 |
* under the terms of the GNU General Public License version 2 only, as |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
7 |
* published by the Free Software Foundation. |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
8 |
* |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
9 |
* This code is distributed in the hope that it will be useful, but WITHOUT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
10 |
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
11 |
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
12 |
* version 2 for more details (a copy is included in the LICENSE file that |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
13 |
* accompanied this code). |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
14 |
* |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
15 |
* You should have received a copy of the GNU General Public License version |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
16 |
* 2 along with this work; if not, write to the Free Software Foundation, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
17 |
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
18 |
* |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
19 |
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
20 |
* or visit www.oracle.com if you need additional information or have any |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
21 |
* questions. |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
22 |
*/ |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
23 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
24 |
/** |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
25 |
* @test |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
26 |
* @bug 8225436 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
27 |
* @summary Stapled OCSPResponses should be added to PKIXRevocationChecker |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
28 |
* irrespective of revocationEnabled flag |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
29 |
* @library /test/lib |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
30 |
* @modules java.base/sun.security.validator |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
31 |
* @build jdk.test.lib.Convert |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
32 |
* @run main PKIXValAndRevCheckTests |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
33 |
*/ |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
34 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
35 |
import java.io.ByteArrayInputStream; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
36 |
import java.io.UnsupportedEncodingException; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
37 |
import java.security.cert.CertPathValidator; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
38 |
import java.security.cert.CertPathValidatorException; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
39 |
import java.security.cert.CertPathValidatorException.BasicReason; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
40 |
import java.security.cert.CertificateException; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
41 |
import java.security.cert.CertificateFactory; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
42 |
import java.security.cert.PKIXBuilderParameters; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
43 |
import java.security.cert.PKIXRevocationChecker; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
44 |
import java.security.cert.TrustAnchor; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
45 |
import java.security.cert.X509Certificate; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
46 |
import java.util.Base64; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
47 |
import java.util.Collections; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
48 |
import java.util.Date; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
49 |
import java.util.List; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
50 |
import java.util.Map; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
51 |
import java.util.Set; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
52 |
import sun.security.validator.Validator; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
53 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
54 |
public class PKIXValAndRevCheckTests { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
55 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
56 |
// subject: CN=Good Server,O=TestPKI |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
57 |
// issuer: CN=CA1 Intermediate,O=TestPKI |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
58 |
// serial: 01000015 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
59 |
// notBefore: Aug 16 02:42:32 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
60 |
// notAfter: Aug 15 02:42:32 2020 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
61 |
static final String GOOD_SERVER_PEM = |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
62 |
"-----BEGIN CERTIFICATE-----\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
63 |
"MIIDjTCCAnWgAwIBAgIEAQAAFTANBgkqhkiG9w0BAQsFADAtMRAwDgYDVQQKDAdU\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
64 |
"ZXN0UEtJMRkwFwYDVQQDDBBDQTEgSW50ZXJtZWRpYXRlMB4XDTE5MDgxNjAyNDIz\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
65 |
"MloXDTIwMDgxNTAyNDIzMlowKDEQMA4GA1UECgwHVGVzdFBLSTEUMBIGA1UEAwwL\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
66 |
"R29vZCBTZXJ2ZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQSUF\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
67 |
"L5th5P21Vijy5pm0WnC0AWCSHX5003f9um70k/IdaAg2rsj/aKHnsm+r4xXGD236\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
68 |
"S7DxBR2w8NTnAofgRWlsAn74lWQhV2p3SU/JKEtFbJV1YAnNOUPKsCnVKDfe3Gev\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
69 |
"zxOLpZ/VKSx9u20bOUbh6QxqlIdIuJ6AW/cgyjdvuN16sIWGWzl17lm81T1cy89x\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
70 |
"TvvsHHqfAh+y3jMwqvIRxoaNQoOjcmxSldRnCwBfhg8xHxB4wKa4z+6Y3gndzne1\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
71 |
"Ms0itbtdYlSF3ADOtwoBrftYDpvsG8VhA4x4QqFAAKx1FPO6OJBYGNfZvnoDDi9g\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
72 |
"i0PgDNftm0l/6FGlAgMBAAGjgbkwgbYwHQYDVR0OBBYEFJNBzLRxgb0znmeuYXc3\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
73 |
"UaFGd9m3MB8GA1UdIwQYMBaAFJraQNM+W62lwqzcSEc6VjNXAaSaMA4GA1UdDwEB\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
74 |
"/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEwYDVR0RBAww\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
75 |
"CoIIdGVyaXlha2kwMAYIKwYBBQUHAQEEJDAiMCAGCCsGAQUFBzABhhRodHRwOi8v\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
76 |
"dGVyaXlha2k6NTIwMDANBgkqhkiG9w0BAQsFAAOCAQEAadl0EQdBJw6dBBelxtox\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
77 |
"id18HMt+MsXssHun1nx8My0VZ3uQBNJ4GgKipNFa+s8nPZIzRr0Ls65dIUiBcg3R\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
78 |
"ep0he/gnkaowRRxGqMkALl3VzUz8INSRzdCIVm0EBeDCaHGLzE6G3uIqWwldei8k\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
79 |
"IOHtiVLESAJvCvSEOAnoJHRVD8+tbEIxRsSFkoKGqc5U7bsCVC5uSXOkiHEP/3zm\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
80 |
"6YixiT+hLk6QKegkQxQPZ+irGBeN2q2PAq5vTh1hJDciwqE3h8GxZ15iR3WIedc8\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
81 |
"6EHJ7+N27nWZLtFgcLKNXEsm1Eh/YNIrpeN0OQBGSLD3lIju5IO0mD3oQfA4miqT\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
82 |
"wQ==\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
83 |
"-----END CERTIFICATE-----"; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
84 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
85 |
// subject: CN=Bad Server,O=TestPKI |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
86 |
// issuer: CN=CA1 Intermediate,O=TestPKI |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
87 |
// serial: 01000016 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
88 |
// notBefore: Aug 16 02:43:11 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
89 |
// notAfter: Aug 15 02:43:11 2020 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
90 |
static final String BAD_SERVER_PEM = |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
91 |
"-----BEGIN CERTIFICATE-----\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
92 |
"MIIDjDCCAnSgAwIBAgIEAQAAFjANBgkqhkiG9w0BAQsFADAtMRAwDgYDVQQKDAdU\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
93 |
"ZXN0UEtJMRkwFwYDVQQDDBBDQTEgSW50ZXJtZWRpYXRlMB4XDTE5MDgxNjAyNDMx\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
94 |
"MVoXDTIwMDgxNTAyNDMxMVowJzEQMA4GA1UECgwHVGVzdFBLSTETMBEGA1UEAwwK\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
95 |
"QmFkIFNlcnZlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL9syEok\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
96 |
"K/8E/hm8Q/cLhSwirDIGFC9nqS8p1bVNTClkMsqxkQAcQptP1zLZiMBdgLjOH3cF\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
97 |
"60UAaz2Y+7WYU5MB6AE8IloDgUUKKUTUmXHzM31OiSVu21+ooo59XzV/cCEu+Qlu\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
98 |
"AiaDuTDhIEtM58zs/3RZN0h+v8M2NXUU4bwYmYVeqP8UW9BEjgznIIrvGpqpHKz5\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
99 |
"EwctL+u/h5Z/DoCOnVq3irMCpInY5/VbIuxfkdfawsFROzUWl6fZ3+CTfQfHhKSM\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
100 |
"sz1/zY/BtQLDTKY120M2FaLmmIoOLrqZo8Pi+JL8IVentNfSHvUX5rrnPKB2/JVS\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
101 |
"8Jc2qvLPk4PWbwECAwEAAaOBuTCBtjAdBgNVHQ4EFgQU8z9qWpJ/FDmKOgQI2vY7\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
102 |
"0OwCNFEwHwYDVR0jBBgwFoAUmtpA0z5braXCrNxIRzpWM1cBpJowDgYDVR0PAQH/\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
103 |
"BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjATBgNVHREEDDAK\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
104 |
"ggh0ZXJpeWFraTAwBggrBgEFBQcBAQQkMCIwIAYIKwYBBQUHMAGGFGh0dHA6Ly90\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
105 |
"ZXJpeWFraTo1MjAwMA0GCSqGSIb3DQEBCwUAA4IBAQBzi8U/3b6hfGwE/przqyha\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
106 |
"Y40Nhh1uCm1rz4bZ27z2Q3vzlg2ay4V3I2NaR4eY/wsuO8AW0qdBJExmYqgi+l9U\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
107 |
"S6i9WqyI22jAKUPsx9WmCZltyU589VDU40h2g6C4+8VnOZm6OKKKTjkKrDn/IFJF\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
108 |
"jU4yIvXrEBHNJr/tcQW0+dF2okIBAnVLUNs8CZZJyWesQtu6J0OBj4tE8s0ET4ep\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
109 |
"XC/3mZkGjziEZw8/dDZ0/+CQbrkDP2vs6iNjz/LUIA9dVXUs9sNeqW+VEHI3vZvJ\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
110 |
"gYVDJn5tWZSIY/O2zV97dz9VeDH3aukuoEm5aAxxhazxRDntcnl2DYrrr2bGuS2Y\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
111 |
"-----END CERTIFICATE-----"; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
112 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
113 |
// subject: CN=CA1 Intermediate,O=TestPKI |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
114 |
// issuer: CN=TestRoot,O=TestPKI |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
115 |
// serial: 0100 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
116 |
// notBefore: May 6 06:00:00 2015 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
117 |
// notAfter: Jan 21 12:00:00 2025 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
118 |
static final String INT_CA_PEM = |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
119 |
"-----BEGIN CERTIFICATE-----\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
120 |
"MIIEbTCCAlWgAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwJTEQMA4GA1UECgwHVGVz\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
121 |
"dFBLSTERMA8GA1UEAwwIVGVzdFJvb3QwHhcNMTUwNTA2MDYwMDAwWhcNMjUwMTIx\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
122 |
"MTIwMDAwWjAtMRAwDgYDVQQKDAdUZXN0UEtJMRkwFwYDVQQDDBBDQTEgSW50ZXJt\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
123 |
"ZWRpYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdKjBpeuJJEv\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
124 |
"di4wMGHE5y7inXuDvMCjkjFRv9XOH20BVAIDMTMeIByk6NQJYeeaTRGXTawZN8/c\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
125 |
"aXtQuqsRGz/q2va/I+A5HIvtu+vujdVksu2baafGM0Ql8Gdzj8MdLGb+kGFji/FX\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
126 |
"f+2PL8UfpnmUikLN728lF9bzcA046I8B43SriFJeYOlLPfE/yjNg5eccdMPDBw7h\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
127 |
"KQPVbXfpcmWRJm/vGlCR38Rd7ceYF3/ctf/0J8Dab7q98ITpH9q5NFD+o2NJZoFq\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
128 |
"7HBPdGTIJ73m3WPzLRrU+JPD7xs9wgmuuRq6hU/lPSd5IJSkJ/cyXkma1RwBO4Lm\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
129 |
"rU2aWDGhNwIDAQABo4GeMIGbMB0GA1UdDgQWBBSa2kDTPlutpcKs3EhHOlYzVwGk\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
130 |
"mjAfBgNVHSMEGDAWgBTwWIIuUEAneAXJeud3ioakmTg32zAPBgNVHRMBAf8EBTAD\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
131 |
"AQH/MA4GA1UdDwEB/wQEAwIBhjA4BggrBgEFBQcBAQQsMCowKAYIKwYBBQUHMAGG\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
132 |
"HGh0dHA6Ly9qaWFuLm9zdGFwbGUub3JnOjcxMDAwDQYJKoZIhvcNAQELBQADggIB\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
133 |
"ADRoginKFigLOKz1NJN86w66eP3r4D/5Qq8+G9DiasmThLQfaVYBvuaR9kL3D9Vr\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
134 |
"1EEXRGmCxMTHetW0SQ/SsMeRbBf8Ihck4MOeAC9cMysvtNfjpwxaAh6zF5bX4pjj\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
135 |
"33gJpjPLNAZru09rSF0GIo9CxPh9rBOkmttrnPDX7rLR9962i/P4KHyHknGM7gY0\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
136 |
"U88ddugkANiFIiAfBRGFz3AqMiMi3VP5STCP0k0ab/frkev6C/qq3th4gQ/Bog/5\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
137 |
"YaoWvzGAs7QoQ7+r0BIRZhG71WQKD4Yx1a43RnG3tFPLFznk0odeh8sr/CI3H/+b\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
138 |
"eyyJLd02ApujZoAfMHzTcq/27mO1ZvA5qSt4wsb7gswnIYwXbJZBBRoixGFD7VP0\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
139 |
"NEXREljpEuGIIy2lkHb5wNV3OEMmAmoKwx1GXWXRfQRHqn1f2/XLYInDg0u9u+G6\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
140 |
"UX3edn6rwP+vlIX2Cx4qC/yX4zg7YxMXCwrol91/7wugkUGPjmU6qmK+TtuwZNQG\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
141 |
"2wtCB4FJXa0YZyDd7U/FH7nWZtG9BgzpLit90hC4+m5V4E/7I6slvwxpkE7y0Nju\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
142 |
"tjy/qcuil6imrOR/apuwT1ecAmyjm1UmpKPLLzYnE6AtSKOTndGa2iNyPDrseFLy\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
143 |
"7TUF/fg/dvZ46OmouSX3upAFRnvpXYXwSQRQ2S+wEnbp\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
144 |
"-----END CERTIFICATE-----"; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
145 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
146 |
// subject: CN=TestRoot,O=TestPKI |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
147 |
// issuer: CN=TestRoot,O=TestPKI |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
148 |
// serial: 01 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
149 |
// notBefore: May 6 00:36:03 2015 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
150 |
// notAfter: Jan 21 00:36:03 2035 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
151 |
static final String ROOT_CA_PEM = |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
152 |
"-----BEGIN CERTIFICATE-----\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
153 |
"MIIFKDCCAxCgAwIBAgIBATANBgkqhkiG9w0BAQsFADAlMRAwDgYDVQQKDAdUZXN0\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
154 |
"UEtJMREwDwYDVQQDDAhUZXN0Um9vdDAeFw0xNTA1MDYwMDM2MDNaFw0zNTAxMjEw\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
155 |
"MDM2MDNaMCUxEDAOBgNVBAoMB1Rlc3RQS0kxETAPBgNVBAMMCFRlc3RSb290MIIC\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
156 |
"IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuLCcVhyIaPV5CHjvnyAvK978\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
157 |
"TUC2YY5wZ8e21L8C+SvxCoE5U66H+wMsNIC90i1ynlz49G4oKR67GXcijJpVD1fA\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
158 |
"Dq3Hpc3WDY9/5jRKWZOC0qLmXMPEF8wrwyC3aQ81sytDJOhEfxEf3KvwFDI9NUQb\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
159 |
"tFdWB+IDEvaDCTJgOt/jIJAzLTxzvwPBzP/JHdRCwKdmlQStRp20AmDtpgIlm2RH\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
160 |
"v8ywabI/UqncZHe/LVYdmDNxztziM98Zs1I7vsO2/yebWE/QH3g3k9ZgaT6UnBAq\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
161 |
"gvV2TQhZOGMmps7RrfNdVEHeeRXmJTFAtmbi/o6Ou7xli+3bDuY5Faxk7uOpC54H\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
162 |
"iyyH2Htoyc9A0M9qwkwnrKxlWe594uD9LbWMNBMMTv4nUtf1ZE1swHg/L9XATDa/\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
163 |
"ZB5hL6p/oS2CxloLL982CIbSuV1TcI6s4naTyZ3HxnIKCaOijAK+IDo9qbTFkt9w\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
164 |
"4toc09fWGRV/pgm3p6YptP48JDYTHQK8GvjzQIdALXee28BmM496cV49uo1O6ia0\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
165 |
"Ht1MFMDKav2g9Cr5SYKIFkpZjJ2T0aJ4dLeft+nQCwDP4odHRBTQbqK9oMw6qYav\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
166 |
"PVuZJWwW3ilZtke2D28N4bF2X1nMYFM2obnB/TLkpreNSiyV6M0D2DW8tpGLTXOp\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
167 |
"yZEJqAx2dEhfxRNE7sECAwEAAaNjMGEwHQYDVR0OBBYEFPBYgi5QQCd4Bcl653eK\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
168 |
"hqSZODfbMB8GA1UdIwQYMBaAFPBYgi5QQCd4Bcl653eKhqSZODfbMA8GA1UdEwEB\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
169 |
"/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4ICAQBjCVYc\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
170 |
"0PmSjzxYGfXtR6+JaDrA/1jhkTPTVTqVniKV4beqoX90BE9krvic7nfvxoYecNux\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
171 |
"b1ZZkXMZ0NVadjxySaFmHo9E5eoPWp2N0Jb5rV+imlofz+U9/lANTb9QJ4L+qUwL\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
172 |
"s40zai1i5yvt4ZcowBRy2BohF2qgaFy8rd+amqVd8LnG06HIOJjZYKgKd2EJyQR6\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
173 |
"F6SPPuSfK5wpkBnkTUvtsvx4+8MKUfKRThGQkovSbXxfusAWehe9XT5hCgG2s04J\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
174 |
"7rL1LVrviBXPFaQgbIGov0PubCJM6V6GFwNJxqVLxbFS0mN+z9M6JzJM5SRF/Ki5\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
175 |
"daczIOGNELVbCct/4aaWeHYwXfnJo/EghAdbS2DPvESXQhNsuW6KYTl6Qhzu3UHw\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
176 |
"yaEIOh2LYENhKJq91Ww6Xhk9seGuwIsj6HXS30lrRztDM+GPU44WQxhmSUwY0C9g\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
177 |
"+KydH1c71eH5vBG3ODKsqBtFkHVD0qhm3Oa33uyUOdvNeRyIQzXSH9QJPXbJURqD\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
178 |
"TRNWmLG4eEIGIFCYyuaBSeCKrvPyiUXR0p9XQjOJVuCQPr8pfW483/BtlzAa6v3r\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
179 |
"jDOoB5v4FaC57HFt8aMrf/B3KGtH/PBpdRSAAIWAIwt9sbTq8nzhCIFhxJTiRWxQ\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
180 |
"uvSM40WEaUsmfpxU+tF2LJvWmNNbDDtEmbFsQQ==\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
181 |
"-----END CERTIFICATE-----"; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
182 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
183 |
// OCSP Response Status: successful (0x0) |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
184 |
// Response Type: Basic OCSP Response |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
185 |
// Version: 1 (0x0) |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
186 |
// Responder Id: O = TestPKI, CN = TestRoot |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
187 |
// Produced At: Aug 16 06:06:27 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
188 |
// Responses: |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
189 |
// Certificate ID: |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
190 |
// Hash Algorithm: sha1 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
191 |
// Issuer Name Hash: 622C4B816C42E2E99FF41B5CED388DAA33A6B9B3 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
192 |
// Issuer Key Hash: F058822E5040277805C97AE7778A86A4993837DB |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
193 |
// Serial Number: 0100 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
194 |
// Cert Status: good |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
195 |
// This Update: Aug 16 06:06:27 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
196 |
// Next Update: Aug 17 06:06:27 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
197 |
static final String INT_CA_OCSP_PEM = |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
198 |
"MIIILwoBAKCCCCgwgggkBgkrBgEFBQcwAQEEgggVMIIIETCBxqEnMCUxEDAOBgNV\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
199 |
"BAoMB1Rlc3RQS0kxETAPBgNVBAMMCFRlc3RSb290GA8yMDE5MDgxNjA2MDYyN1ow\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
200 |
"ZTBjMDswCQYFKw4DAhoFAAQUYixLgWxC4umf9Btc7TiNqjOmubMEFPBYgi5QQCd4\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
201 |
"Bcl653eKhqSZODfbAgIBAIAAGA8yMDE5MDgxNjA2MDYyN1qgERgPMjAxOTA4MTcw\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
202 |
"NjA2MjdaoSMwITAfBgkrBgEFBQcwAQIEEgQQwlXs/KMVtgxAfc/QGVpHojANBgkq\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
203 |
"hkiG9w0BAQsFAAOCAgEAsDp1oTacP+wZ5ryFzM+j5AaMJ9k7Gmer4QqecszG2YzS\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
204 |
"eM4TUoB2xh3VyQy7OdIDeEsPIwSs/tzJ15/QfJz9WZ6iEUJRj9rnkwdAdRr13AIr\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
205 |
"I7G2jwp7Mbm3h/jluT84tE8+DGohsUq0JGsv1pviT0HL0x40OqfDcOjwvrFCAid1\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
206 |
"ZZwlCWMeybFdX9+GLeHWnyzotajChw52iMK/EHwEWAD2gVX1WbuByGLRy4Oy9HPY\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
207 |
"QbZHjRwlDD29gv9eWK+sFGKV7aBAYTqPkAAvp+GA0xnVUKCuTSHMp53pDA2lkOMp\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
208 |
"z5Hi7SMmkxckTDQI+2By0qwxLymEDbHaALO+XdSD5F5Kysjp6GnfjNcYZQgbxtrC\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
209 |
"ZJOud/hPtBqVEJg42KLLdcYq7uTdNxuQmsu5MK+TTlM37eOWhtbRAozIn2j17QT0\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
210 |
"GV9s+BZWyku8la5+yFUuel5FbNQQTP5av+dKCS3BD/29XFOG4EfK0MEZknA3QKSG\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
211 |
"cI0kd8q5I4fEtsxGW6afra1YBj1TWcnsbHGL/PGHBR0WBr5DXo48dXLHCxEeiAiq\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
212 |
"4lZMcgL4od+hyIOK21evO20sH/Ec73Z0/tXykYp8Y92uv56hRj4/y+WnueyrTOIH\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
213 |
"cwXSvyNTcf0fyZuWEsmUAQmchNPLsEmAolDTcUJsMWOzmYk8cr1WYFrcLWgbOvag\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
214 |
"ggUwMIIFLDCCBSgwggMQoAMCAQICAQEwDQYJKoZIhvcNAQELBQAwJTEQMA4GA1UE\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
215 |
"CgwHVGVzdFBLSTERMA8GA1UEAwwIVGVzdFJvb3QwHhcNMTUwNTA2MDAzNjAzWhcN\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
216 |
"MzUwMTIxMDAzNjAzWjAlMRAwDgYDVQQKDAdUZXN0UEtJMREwDwYDVQQDDAhUZXN0\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
217 |
"Um9vdDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALiwnFYciGj1eQh4\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
218 |
"758gLyve/E1AtmGOcGfHttS/Avkr8QqBOVOuh/sDLDSAvdItcp5c+PRuKCkeuxl3\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
219 |
"IoyaVQ9XwA6tx6XN1g2Pf+Y0SlmTgtKi5lzDxBfMK8Mgt2kPNbMrQyToRH8RH9yr\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
220 |
"8BQyPTVEG7RXVgfiAxL2gwkyYDrf4yCQMy08c78Dwcz/yR3UQsCnZpUErUadtAJg\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
221 |
"7aYCJZtkR7/MsGmyP1Kp3GR3vy1WHZgzcc7c4jPfGbNSO77Dtv8nm1hP0B94N5PW\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
222 |
"YGk+lJwQKoL1dk0IWThjJqbO0a3zXVRB3nkV5iUxQLZm4v6Ojru8ZYvt2w7mORWs\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
223 |
"ZO7jqQueB4ssh9h7aMnPQNDPasJMJ6ysZVnufeLg/S21jDQTDE7+J1LX9WRNbMB4\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
224 |
"Py/VwEw2v2QeYS+qf6EtgsZaCy/fNgiG0rldU3COrOJ2k8mdx8ZyCgmjoowCviA6\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
225 |
"Pam0xZLfcOLaHNPX1hkVf6YJt6emKbT+PCQ2Ex0CvBr480CHQC13ntvAZjOPenFe\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
226 |
"PbqNTuomtB7dTBTAymr9oPQq+UmCiBZKWYydk9GieHS3n7fp0AsAz+KHR0QU0G6i\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
227 |
"vaDMOqmGrz1bmSVsFt4pWbZHtg9vDeGxdl9ZzGBTNqG5wf0y5Ka3jUoslejNA9g1\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
228 |
"vLaRi01zqcmRCagMdnRIX8UTRO7BAgMBAAGjYzBhMB0GA1UdDgQWBBTwWIIuUEAn\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
229 |
"eAXJeud3ioakmTg32zAfBgNVHSMEGDAWgBTwWIIuUEAneAXJeud3ioakmTg32zAP\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
230 |
"BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjANBgkqhkiG9w0BAQsFAAOC\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
231 |
"AgEAYwlWHND5ko88WBn17UeviWg6wP9Y4ZEz01U6lZ4ileG3qqF/dARPZK74nO53\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
232 |
"78aGHnDbsW9WWZFzGdDVWnY8ckmhZh6PROXqD1qdjdCW+a1foppaH8/lPf5QDU2/\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
233 |
"UCeC/qlMC7ONM2otYucr7eGXKMAUctgaIRdqoGhcvK3fmpqlXfC5xtOhyDiY2WCo\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
234 |
"CndhCckEehekjz7knyucKZAZ5E1L7bL8ePvDClHykU4RkJKL0m18X7rAFnoXvV0+\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
235 |
"YQoBtrNOCe6y9S1a74gVzxWkIGyBqL9D7mwiTOlehhcDScalS8WxUtJjfs/TOicy\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
236 |
"TOUkRfyouXWnMyDhjRC1WwnLf+Gmlnh2MF35yaPxIIQHW0tgz7xEl0ITbLluimE5\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
237 |
"ekIc7t1B8MmhCDodi2BDYSiavdVsOl4ZPbHhrsCLI+h10t9Ja0c7QzPhj1OOFkMY\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
238 |
"ZklMGNAvYPisnR9XO9Xh+bwRtzgyrKgbRZB1Q9KoZtzmt97slDnbzXkciEM10h/U\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
239 |
"CT12yVEag00TVpixuHhCBiBQmMrmgUngiq7z8olF0dKfV0IziVbgkD6/KX1uPN/w\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
240 |
"bZcwGur964wzqAeb+BWguexxbfGjK3/wdyhrR/zwaXUUgACFgCMLfbG06vJ84QiB\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
241 |
"YcSU4kVsULr0jONFhGlLJn6cVPrRdiyb1pjTWww7RJmxbEE="; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
242 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
243 |
// OCSP Response Status: successful (0x0) |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
244 |
// Response Type: Basic OCSP Response |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
245 |
// Version: 1 (0x0) |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
246 |
// Responder Id: O = TestPKI, CN = CA1 Intermediate |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
247 |
// Produced At: Aug 16 05:03:09 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
248 |
// Responses: |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
249 |
// Certificate ID: |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
250 |
// Hash Algorithm: sha1 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
251 |
// Issuer Name Hash: FE48D59BAF624773549AE209AA14FD20DCE6B8F4 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
252 |
// Issuer Key Hash: 9ADA40D33E5BADA5C2ACDC48473A56335701A49A |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
253 |
// Serial Number: 01000015 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
254 |
// Cert Status: good |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
255 |
// This Update: Aug 16 05:03:09 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
256 |
// Next Update: Aug 17 05:03:09 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
257 |
static final String GOOD_GUY_OCSP_PEM = |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
258 |
"MIIGfgoBAKCCBncwggZzBgkrBgEFBQcwAQEEggZkMIIGYDCB0KEvMC0xEDAOBgNV\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
259 |
"BAoMB1Rlc3RQS0kxGTAXBgNVBAMMEENBMSBJbnRlcm1lZGlhdGUYDzIwMTkwODE2\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
260 |
"MDUwMzA5WjBnMGUwPTAJBgUrDgMCGgUABBT+SNWbr2JHc1Sa4gmqFP0g3Oa49AQU\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
261 |
"mtpA0z5braXCrNxIRzpWM1cBpJoCBAEAABWAABgPMjAxOTA4MTYwNTAzMDlaoBEY\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
262 |
"DzIwMTkwODE3MDUwMzA5WqEjMCEwHwYJKwYBBQUHMAECBBIEEN087n3ef92+4d2K\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
263 |
"+XaudDUwDQYJKoZIhvcNAQELBQADggEBAErIOOkLGwbDWgrpl3lQbsnaoVY6YNYV\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
264 |
"x1bfJ89S8twBouei6a/HmAIDqUPmlVF7gm8sNvgANXuZGkWXmqadSpWxLA36ZT4d\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
265 |
"70iRLmdTaPnKVpUEO5dYMg7nWW+D4hp9wupkPaB3PsEPb4pwrcTOUH1FAi3pZ+hF\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
266 |
"oeNDaE3jHQGEz4dVK1XgK2pxFNf4aTIgj+w40xN5yaCcTYicbLmumNGCzrGwnRqh\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
267 |
"tyoiz27+rTxFrEeWGnNslJfScD9O4oe/KhvYBusurNVrFgG4VcxB5NNemrCW4/cf\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
268 |
"dehv8z50FaZvq1xklqkZ4hgbjNxtI8lAHp+wYDQJub0mhXWmb9K/4kOgggR1MIIE\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
269 |
"cTCCBG0wggJVoAMCAQICAgEAMA0GCSqGSIb3DQEBCwUAMCUxEDAOBgNVBAoMB1Rl\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
270 |
"c3RQS0kxETAPBgNVBAMMCFRlc3RSb290MB4XDTE1MDUwNjA2MDAwMFoXDTI1MDEy\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
271 |
"MTEyMDAwMFowLTEQMA4GA1UECgwHVGVzdFBLSTEZMBcGA1UEAwwQQ0ExIEludGVy\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
272 |
"bWVkaWF0ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALXSowaXriSR\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
273 |
"L3YuMDBhxOcu4p17g7zAo5IxUb/Vzh9tAVQCAzEzHiAcpOjUCWHnmk0Rl02sGTfP\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
274 |
"3Gl7ULqrERs/6tr2vyPgORyL7bvr7o3VZLLtm2mnxjNEJfBnc4/DHSxm/pBhY4vx\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
275 |
"V3/tjy/FH6Z5lIpCze9vJRfW83ANOOiPAeN0q4hSXmDpSz3xP8ozYOXnHHTDwwcO\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
276 |
"4SkD1W136XJlkSZv7xpQkd/EXe3HmBd/3LX/9CfA2m+6vfCE6R/auTRQ/qNjSWaB\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
277 |
"auxwT3RkyCe95t1j8y0a1PiTw+8bPcIJrrkauoVP5T0neSCUpCf3Ml5JmtUcATuC\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
278 |
"5q1NmlgxoTcCAwEAAaOBnjCBmzAdBgNVHQ4EFgQUmtpA0z5braXCrNxIRzpWM1cB\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
279 |
"pJowHwYDVR0jBBgwFoAU8FiCLlBAJ3gFyXrnd4qGpJk4N9swDwYDVR0TAQH/BAUw\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
280 |
"AwEB/zAOBgNVHQ8BAf8EBAMCAYYwOAYIKwYBBQUHAQEELDAqMCgGCCsGAQUFBzAB\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
281 |
"hhxodHRwOi8vamlhbi5vc3RhcGxlLm9yZzo3MTAwMA0GCSqGSIb3DQEBCwUAA4IC\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
282 |
"AQA0aIIpyhYoCzis9TSTfOsOunj96+A/+UKvPhvQ4mrJk4S0H2lWAb7mkfZC9w/V\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
283 |
"a9RBF0RpgsTEx3rVtEkP0rDHkWwX/CIXJODDngAvXDMrL7TX46cMWgIesxeW1+KY\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
284 |
"4994CaYzyzQGa7tPa0hdBiKPQsT4fawTpJrba5zw1+6y0ffetovz+Ch8h5JxjO4G\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
285 |
"NFPPHXboJADYhSIgHwURhc9wKjIjIt1T+Ukwj9JNGm/365Hr+gv6qt7YeIEPwaIP\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
286 |
"+WGqFr8xgLO0KEO/q9ASEWYRu9VkCg+GMdWuN0Zxt7RTyxc55NKHXofLK/wiNx//\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
287 |
"m3ssiS3dNgKbo2aAHzB803Kv9u5jtWbwOakreMLG+4LMJyGMF2yWQQUaIsRhQ+1T\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
288 |
"9DRF0RJY6RLhiCMtpZB2+cDVdzhDJgJqCsMdRl1l0X0ER6p9X9v1y2CJw4NLvbvh\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
289 |
"ulF93nZ+q8D/r5SF9gseKgv8l+M4O2MTFwsK6Jfdf+8LoJFBj45lOqpivk7bsGTU\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
290 |
"BtsLQgeBSV2tGGcg3e1PxR+51mbRvQYM6S4rfdIQuPpuVeBP+yOrJb8MaZBO8tDY\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
291 |
"7rY8v6nLopeopqzkf2qbsE9XnAJso5tVJqSjyy82JxOgLUijk53Rmtojcjw67HhS\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
292 |
"8u01Bf34P3b2eOjpqLkl97qQBUZ76V2F8EkEUNkvsBJ26Q=="; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
293 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
294 |
// OCSP Response Status: successful (0x0) |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
295 |
// Response Type: Basic OCSP Response |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
296 |
// Version: 1 (0x0) |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
297 |
// Responder Id: O = TestPKI, CN = CA1 Intermediate |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
298 |
// Produced At: Aug 16 05:03:27 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
299 |
// Responses: |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
300 |
// Certificate ID: |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
301 |
// Hash Algorithm: sha1 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
302 |
// Issuer Name Hash: FE48D59BAF624773549AE209AA14FD20DCE6B8F4 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
303 |
// Issuer Key Hash: 9ADA40D33E5BADA5C2ACDC48473A56335701A49A |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
304 |
// Serial Number: 01000016 |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
305 |
// Cert Status: revoked |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
306 |
// Revocation Time: Aug 16 04:59:31 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
307 |
// Revocation Reason: keyCompromise (0x1) |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
308 |
// This Update: Aug 16 05:03:27 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
309 |
// Next Update: Aug 17 05:03:27 2019 GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
310 |
static final String BAD_GUY_OCSP_PEM = |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
311 |
"MIIGlAoBAKCCBo0wggaJBgkrBgEFBQcwAQEEggZ6MIIGdjCB5qEvMC0xEDAOBgNV\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
312 |
"BAoMB1Rlc3RQS0kxGTAXBgNVBAMMEENBMSBJbnRlcm1lZGlhdGUYDzIwMTkwODE2\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
313 |
"MDUwMzI3WjB9MHswPTAJBgUrDgMCGgUABBT+SNWbr2JHc1Sa4gmqFP0g3Oa49AQU\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
314 |
"mtpA0z5braXCrNxIRzpWM1cBpJoCBAEAABahFhgPMjAxOTA4MTYwNDU5MzFaoAMK\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
315 |
"AQEYDzIwMTkwODE2MDUwMzI3WqARGA8yMDE5MDgxNzA1MDMyN1qhIzAhMB8GCSsG\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
316 |
"AQUFBzABAgQSBBBbPvAp5xnQ39vLywYMAWbPMA0GCSqGSIb3DQEBCwUAA4IBAQBX\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
317 |
"Ii5GX3Nu9Jqk5ARv+hXlYoJMia+cy02AcVcQiPE250dtNu7tfkX4FhtCDtN+HqqB\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
318 |
"xYUEBk95KPXZiLt7Dla9B38KC5i5gscGBPUW2tGa2wFyqXkG+blPasOc+O5DlvUU\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
319 |
"294HpH3QIVKnZioGpfIHR8h5sa0CGaXykEK4qyjw7IWD7mf5xQZflwE50Ez/0nDi\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
320 |
"NhN+MOp8kfHNfgQmzbx3dLL8LT1j5qdQ9cdkdXwn+DF6v6SJXwn/hOdFDUr4eZ7L\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
321 |
"RAzgaAKvL6DbOGWtnw7fifx++agTzQWkjAto4ekTkzyHK74mqBuyT/6vkgppcPuD\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
322 |
"osE9qhBxWJYQsqWNydXEoIIEdTCCBHEwggRtMIICVaADAgECAgIBADANBgkqhkiG\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
323 |
"9w0BAQsFADAlMRAwDgYDVQQKDAdUZXN0UEtJMREwDwYDVQQDDAhUZXN0Um9vdDAe\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
324 |
"Fw0xNTA1MDYwNjAwMDBaFw0yNTAxMjExMjAwMDBaMC0xEDAOBgNVBAoMB1Rlc3RQ\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
325 |
"S0kxGTAXBgNVBAMMEENBMSBJbnRlcm1lZGlhdGUwggEiMA0GCSqGSIb3DQEBAQUA\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
326 |
"A4IBDwAwggEKAoIBAQC10qMGl64kkS92LjAwYcTnLuKde4O8wKOSMVG/1c4fbQFU\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
327 |
"AgMxMx4gHKTo1Alh55pNEZdNrBk3z9xpe1C6qxEbP+ra9r8j4Dkci+276+6N1WSy\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
328 |
"7Ztpp8YzRCXwZ3OPwx0sZv6QYWOL8Vd/7Y8vxR+meZSKQs3vbyUX1vNwDTjojwHj\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
329 |
"dKuIUl5g6Us98T/KM2Dl5xx0w8MHDuEpA9Vtd+lyZZEmb+8aUJHfxF3tx5gXf9y1\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
330 |
"//QnwNpvur3whOkf2rk0UP6jY0lmgWrscE90ZMgnvebdY/MtGtT4k8PvGz3CCa65\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
331 |
"GrqFT+U9J3kglKQn9zJeSZrVHAE7guatTZpYMaE3AgMBAAGjgZ4wgZswHQYDVR0O\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
332 |
"BBYEFJraQNM+W62lwqzcSEc6VjNXAaSaMB8GA1UdIwQYMBaAFPBYgi5QQCd4Bcl6\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
333 |
"53eKhqSZODfbMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgGGMDgGCCsG\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
334 |
"AQUFBwEBBCwwKjAoBggrBgEFBQcwAYYcaHR0cDovL2ppYW4ub3N0YXBsZS5vcmc6\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
335 |
"NzEwMDANBgkqhkiG9w0BAQsFAAOCAgEANGiCKcoWKAs4rPU0k3zrDrp4/evgP/lC\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
336 |
"rz4b0OJqyZOEtB9pVgG+5pH2QvcP1WvUQRdEaYLExMd61bRJD9Kwx5FsF/wiFyTg\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
337 |
"w54AL1wzKy+01+OnDFoCHrMXltfimOPfeAmmM8s0Bmu7T2tIXQYij0LE+H2sE6Sa\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
338 |
"22uc8NfustH33raL8/gofIeScYzuBjRTzx126CQA2IUiIB8FEYXPcCoyIyLdU/lJ\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
339 |
"MI/STRpv9+uR6/oL+qre2HiBD8GiD/lhqha/MYCztChDv6vQEhFmEbvVZAoPhjHV\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
340 |
"rjdGcbe0U8sXOeTSh16Hyyv8Ijcf/5t7LIkt3TYCm6NmgB8wfNNyr/buY7Vm8Dmp\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
341 |
"K3jCxvuCzCchjBdslkEFGiLEYUPtU/Q0RdESWOkS4YgjLaWQdvnA1Xc4QyYCagrD\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
342 |
"HUZdZdF9BEeqfV/b9ctgicODS7274bpRfd52fqvA/6+UhfYLHioL/JfjODtjExcL\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
343 |
"CuiX3X/vC6CRQY+OZTqqYr5O27Bk1AbbC0IHgUldrRhnIN3tT8UfudZm0b0GDOku\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
344 |
"K33SELj6blXgT/sjqyW/DGmQTvLQ2O62PL+py6KXqKas5H9qm7BPV5wCbKObVSak\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
345 |
"o8svNicToC1Io5Od0ZraI3I8Oux4UvLtNQX9+D929njo6ai5Jfe6kAVGe+ldhfBJ\n" + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
346 |
"BFDZL7ASduk="; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
347 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
348 |
// Saturday, August 17, 2019 2:00:00 AM GMT |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
349 |
static final Date VALID_DATE = new Date(1566007200000L); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
350 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
351 |
public static void main(String[] args) throws Exception { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
352 |
CertificateFactory certFac = CertificateFactory.getInstance("X.509"); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
353 |
CertPathValidator cpv = CertPathValidator.getInstance("PKIX"); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
354 |
X509Certificate goodGuyCert = getCert(certFac, GOOD_SERVER_PEM); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
355 |
X509Certificate badGuyCert = getCert(certFac, BAD_SERVER_PEM); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
356 |
X509Certificate intCACert = getCert(certFac, INT_CA_PEM); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
357 |
X509Certificate rootCACert = getCert(certFac, ROOT_CA_PEM); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
358 |
byte[] goodOcspDer = pemToDer(GOOD_GUY_OCSP_PEM); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
359 |
byte[] badOcspDer = pemToDer(BAD_GUY_OCSP_PEM); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
360 |
byte[] intCAOcspDer = pemToDer(INT_CA_OCSP_PEM); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
361 |
Set<TrustAnchor> trustAnchors = |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
362 |
Set.of(new TrustAnchor(rootCACert, null)); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
363 |
PKIXRevocationChecker pkrc; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
364 |
PKIXBuilderParameters pkixParams; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
365 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
366 |
X509Certificate[] goodPath = { goodGuyCert, intCACert, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
367 |
rootCACert }; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
368 |
X509Certificate[] badPath = { badGuyCert, intCACert, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
369 |
rootCACert }; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
370 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
371 |
List<byte[]> goodResponses = List.of(goodOcspDer, intCAOcspDer); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
372 |
List<byte[]> badResponses = List.of(badOcspDer, intCAOcspDer); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
373 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
374 |
// Test 1: Path validation with revocation explicitly turned |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
375 |
// off, expected to pass. |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
376 |
pkixParams = new PKIXBuilderParameters(trustAnchors, null); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
377 |
pkixParams.setRevocationEnabled(false); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
378 |
validatePath(goodPath, Collections.emptyList(), pkixParams, null); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
379 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
380 |
// Test 2: Path validation with revocation turned on using the |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
381 |
// good path. Should fail due to no responses. |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
382 |
pkixParams = new PKIXBuilderParameters(trustAnchors, null); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
383 |
pkixParams.setDate(VALID_DATE); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
384 |
validatePath(goodPath, Collections.emptyList(), pkixParams, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
385 |
new CertPathValidatorException("KABOOM! No OCSP Responses!", null, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
386 |
certFac.generateCertPath(List.of(goodGuyCert, intCACert)), 1, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
387 |
BasicReason.UNDETERMINED_REVOCATION_STATUS)); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
388 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
389 |
// Test 3: Path validation of the good path with revocation turned |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
390 |
// on and available valid OCSP responses delivered through the |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
391 |
// List<byte[]> rather than via the PKIXRevocationChecker. |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
392 |
pkixParams = new PKIXBuilderParameters(trustAnchors, null); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
393 |
pkixParams.setDate(VALID_DATE); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
394 |
pkrc = (PKIXRevocationChecker)cpv.getRevocationChecker(); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
395 |
pkixParams.addCertPathChecker(pkrc); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
396 |
validatePath(goodPath, goodResponses, pkixParams, null); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
397 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
398 |
// Test 4: Path validation of the bad path with revocation explicitly |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
399 |
// disabled and valid OCSP responses provided through the PKIXRevocationChecker |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
400 |
// indicating a revoked certificate. Even with the |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
401 |
// setRevocationEnabled method set to false this should perform |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
402 |
// revocation checking and catch the revoked certificate. |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
403 |
pkixParams = new PKIXBuilderParameters(trustAnchors, null); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
404 |
pkixParams.setDate(VALID_DATE); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
405 |
pkixParams.setRevocationEnabled(false); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
406 |
pkrc = (PKIXRevocationChecker)cpv.getRevocationChecker(); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
407 |
pkrc.setOcspResponses(Map.of(badGuyCert, badOcspDer, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
408 |
intCACert, intCAOcspDer)); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
409 |
pkixParams.addCertPathChecker(pkrc); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
410 |
validatePath(badPath, Collections.emptyList(), pkixParams, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
411 |
new CertPathValidatorException("Ouch!", null, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
412 |
certFac.generateCertPath(List.of(badGuyCert, intCACert)), 0, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
413 |
BasicReason.REVOKED)); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
414 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
415 |
// Test 5: This is the same basic setup as test 4, but instead of |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
416 |
// delivering the OCSP responses via the PKIXRevocationChecker use |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
417 |
// the third parameter (List<byte[]>) for the Validator.validate() |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
418 |
// call. Revocation checking should be performed. |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
419 |
pkixParams = new PKIXBuilderParameters(trustAnchors, null); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
420 |
pkixParams.setDate(VALID_DATE); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
421 |
pkixParams.setRevocationEnabled(false); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
422 |
pkrc = (PKIXRevocationChecker)cpv.getRevocationChecker(); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
423 |
pkixParams.addCertPathChecker(pkrc); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
424 |
validatePath(badPath, badResponses, pkixParams, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
425 |
new CertPathValidatorException("Ouch!", null, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
426 |
certFac.generateCertPath(List.of(badGuyCert, intCACert)), 0, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
427 |
BasicReason.REVOKED)); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
428 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
429 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
430 |
static void validatePath(X509Certificate[] path, List<byte[]> responses, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
431 |
PKIXBuilderParameters params, Exception expectedExc) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
432 |
try { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
433 |
Validator val = Validator.getInstance(Validator.TYPE_PKIX, |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
434 |
Validator.VAR_TLS_SERVER, params); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
435 |
val.validate(path, null, responses, null, "RSA"); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
436 |
if (expectedExc != null) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
437 |
// We expected to receive an exception here |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
438 |
throw new RuntimeException("Did not receive expected " + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
439 |
expectedExc.getClass().getName()); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
440 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
441 |
} catch (CertificateException certExc) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
442 |
if (expectedExc == null) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
443 |
// This test was supposed to pass, so wrap it in a Runtime |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
444 |
throw new RuntimeException("Received unexpected exception: ", |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
445 |
certExc); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
446 |
} else { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
447 |
Throwable cause = certExc.getCause(); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
448 |
if (cause == null) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
449 |
throw new RuntimeException("Missing expected cause: " + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
450 |
expectedExc.getClass().getName(), |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
451 |
certExc); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
452 |
} else { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
453 |
verifyCause(cause, expectedExc); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
454 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
455 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
456 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
457 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
458 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
459 |
static void verifyCause(Throwable cause, Throwable expectedExc) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
460 |
if (cause.getClass() != expectedExc.getClass()) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
461 |
throw new RuntimeException("Exception class mismatch: expected = " + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
462 |
expectedExc.getClass().getName() + ", actual = " + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
463 |
cause.getClass().getName()); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
464 |
} else if (cause instanceof CertPathValidatorException) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
465 |
CertPathValidatorException actual = |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
466 |
(CertPathValidatorException)cause; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
467 |
CertPathValidatorException expected = |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
468 |
(CertPathValidatorException)expectedExc; |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
469 |
// The failure index and reason should be the same |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
470 |
if (actual.getIndex() != expected.getIndex() || |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
471 |
actual.getReason() != expected.getReason()) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
472 |
throw new RuntimeException("CertPathValidatorException " + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
473 |
"differs from expected. Expected: index = " + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
474 |
expected.getIndex() + ", reason = " + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
475 |
expected.getReason() + ", Actual: index = " + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
476 |
actual.getIndex() + ", reason = " + |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
477 |
actual.getReason(), actual); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
478 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
479 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
480 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
481 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
482 |
static X509Certificate getCert(CertificateFactory fac, String pemCert) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
483 |
try { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
484 |
ByteArrayInputStream bais = |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
485 |
new ByteArrayInputStream(pemCert.getBytes("UTF-8")); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
486 |
return (X509Certificate)fac.generateCertificate(bais); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
487 |
} catch (UnsupportedEncodingException | CertificateException exc) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
488 |
throw new RuntimeException(exc); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
489 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
490 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
491 |
|
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
492 |
static byte[] pemToDer(String pemData) { |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
493 |
Base64.Decoder b64Dec = Base64.getMimeDecoder(); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
494 |
return b64Dec.decode(pemData); |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
495 |
} |
e1269de19aa5
8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
jnimeh
parents:
diff
changeset
|
496 |
} |