From 18bb2582c32f4373f7ed85894fb490f2733cb03b Mon Sep 17 00:00:00 2001 From: Stef Walter Date: Wed, 2 Jan 2013 16:06:19 +0100 Subject: Implement stapled certificate extensions internally * Use stapled certificate extensions to represent loaded trust policy * Build NSS trust objects from stapled certificate extensions * Add further attribute debugging for NSS trust objects * Use a custom certificate extension for the OpenSSL reject purpose data * Use SubjectKeyIdentifier for OpenSSL keyid data * Use ExtendedKeyUsage for OpenSSL trust purpose data * Implement simple way to handle binary DER OIDs, using the DER TLV length. DER OIDs are used in the CKA_OBJECT_ID value, and elsewhere. * Split out the building of NSS trust objects from the main parser --- trust/tests/files/self-signed-with-ku.der | Bin 0 -> 478 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 trust/tests/files/self-signed-with-ku.der (limited to 'trust/tests/files') diff --git a/trust/tests/files/self-signed-with-ku.der b/trust/tests/files/self-signed-with-ku.der new file mode 100644 index 0000000..51bb227 Binary files /dev/null and b/trust/tests/files/self-signed-with-ku.der differ -- cgit v1.1