/security/nss/tests/chains/scenarios/bridgewithpolicyextensionandmapping.cfg

  1# ***** BEGIN LICENSE BLOCK *****
  2# Version: MPL 1.1/GPL 2.0/LGPL 2.1
  3#
  4# The contents of this file are subject to the Mozilla Public License Version
  5# 1.1 (the "License"); you may not use this file except in compliance with
  6# the License. You may obtain a copy of the License at
  7# http://www.mozilla.org/MPL/
  8#
  9# Software distributed under the License is distributed on an "AS IS" basis,
 10# WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
 11# for the specific language governing rights and limitations under the
 12# License.
 13#
 14# The Original Code is the Network Security Services (NSS)
 15#
 16# The Initial Developer of the Original Code is Sun Microsystems, Inc.
 17# Portions created by the Initial Developer are Copyright (C) 2009
 18# the Initial Developer. All Rights Reserved.
 19#
 20# Contributor(s):
 21#   Slavomir Katuscak <slavomir.katuscak@sun.com>, Sun Microsystems
 22#
 23# Alternatively, the contents of this file may be used under the terms of
 24# either the GNU General Public License Version 2 or later (the "GPL"), or
 25# the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
 26# in which case the provisions of the GPL or the LGPL are applicable instead
 27# of those above. If you wish to allow use of your version of this file only
 28# under the terms of either the GPL or the LGPL, and not to allow others to
 29# use your version of this file under the terms of the MPL, indicate your
 30# decision by deleting the provisions above and replace them with the notice
 31# and other provisions required by the GPL or the LGPL. If you do not delete
 32# the provisions above, a recipient may use your version of this file under
 33# the terms of any one of the MPL, the GPL or the LGPL.
 34#
 35# ***** END LICENSE BLOCK *****
 36
 37scenario BridgeWithPolicyExtensionAndMapping
 38
 39entity Army
 40  type Root
 41
 42entity Navy
 43  type Root
 44
 45entity CAArmy
 46  type Intermediate
 47  issuer Army
 48    policy OID.1.0
 49    policy OID.1.1
 50
 51entity CANavy
 52  type Intermediate
 53  issuer Navy
 54    policy OID.2.0
 55    policy OID.2.1
 56
 57entity Bridge
 58  type Bridge
 59  issuer CAArmy
 60    policy OID.1.0
 61    policy OID.1.1
 62    mapping OID.1.1:OID.2.1
 63  issuer CANavy
 64    policy OID.2.0
 65    policy OID.2.1
 66    mapping OID.2.1:OID.1.1
 67
 68entity CA1
 69  type Intermediate
 70  issuer Bridge
 71    policy OID.1.1
 72    policy OID.2.1
 73
 74entity CA2
 75  type Intermediate
 76  issuer Bridge
 77    policy OID.1.0
 78    policy OID.2.0
 79
 80entity EE1
 81  type EE
 82  issuer CA1
 83    policy OID.2.1
 84
 85entity EE2
 86  type EE
 87  issuer CA2
 88    policy OID.2.0
 89
 90testdb
 91
 92verify EE1:CA1
 93  cert CA1:Bridge
 94  cert Bridge:CAArmy
 95  cert CAArmy:Army
 96  trust Army:
 97  policy OID.1.0
 98  result fail
 99
100verify EE1:CA1
101  cert CA1:Bridge
102  cert Bridge:CAArmy
103  cert CAArmy:Army
104  trust Army:
105  policy OID.1.1
106  result pass
107
108verify EE1:CA1
109  cert CA1:Bridge
110  cert Bridge:CAArmy
111  cert CAArmy:Army
112  trust Army:
113  policy OID.2.0
114  result fail
115
116verify EE1:CA1
117  cert CA1:Bridge
118  cert Bridge:CAArmy
119  cert CAArmy:Army
120  trust Army:
121  policy OID.2.1
122  result fail
123
124verify EE1:CA1
125  cert CA1:Bridge
126  cert Bridge:CANavy
127  cert CANavy:Navy
128  trust Navy:
129  policy OID.1.0
130  result fail
131
132verify EE1:CA1
133  cert CA1:Bridge
134  cert Bridge:CANavy
135  cert CANavy:Navy
136  trust Navy:
137  policy OID.1.1
138  result fail
139
140verify EE1:CA1
141  cert CA1:Bridge
142  cert Bridge:CANavy
143  cert CANavy:Navy
144  trust Navy:
145  policy OID.2.0
146  result fail
147
148verify EE1:CA1
149  cert CA1:Bridge
150  cert Bridge:CANavy
151  cert CANavy:Navy
152  trust Navy:
153  policy OID.2.1
154  result fail
155
156verify EE2:CA2
157  cert CA2:Bridge
158  cert Bridge:CANavy
159  cert CANavy:Navy
160  trust Navy:
161  policy OID.1.0
162  result fail
163
164verify EE2:CA2
165  cert CA2:Bridge
166  cert Bridge:CANavy
167  cert CANavy:Navy
168  trust Navy:
169  policy OID.1.1
170  result fail
171
172verify EE2:CA2
173  cert CA2:Bridge
174  cert Bridge:CANavy
175  cert CANavy:Navy
176  trust Navy:
177  policy OID.2.0
178  result pass
179
180verify EE2:CA2
181  cert CA2:Bridge
182  cert Bridge:CANavy
183  cert CANavy:Navy
184  trust Navy:
185  policy OID.2.1
186  result fail
187
188verify EE2:CA2
189  cert CA2:Bridge
190  cert Bridge:CAArmy
191  cert CAArmy:Army
192  trust Army:
193  policy OID.1.0
194  result fail
195
196verify EE2:CA2
197  cert CA2:Bridge
198  cert Bridge:CAArmy
199  cert CAArmy:Army
200  trust Army:
201  policy OID.1.1
202  result fail
203
204verify EE2:CA2
205  cert CA2:Bridge
206  cert Bridge:CAArmy
207  cert CAArmy:Army
208  trust Army:
209  policy OID.2.0
210  result fail
211
212verify EE2:CA2
213  cert CA2:Bridge
214  cert Bridge:CAArmy
215  cert CAArmy:Army
216  trust Army:
217  policy OID.2.1
218  result fail
219