mirror of
https://github.com/curl/curl.git
synced 2026-07-30 04:48:04 +03:00
8988f33f62
- test2088 verifies that mutual tls works This adds a new certificate to generate which has the clientAuth key usage enabled, and uses it to connect to a https-mtls server. Closes #16923
35 lines
1 KiB
Promela
35 lines
1 KiB
Promela
extensions = x509v3
|
|
|
|
[ x509v3 ]
|
|
subjectAltName = DNS:localhost
|
|
keyUsage = keyEncipherment,digitalSignature,keyAgreement
|
|
extendedKeyUsage = serverAuth,clientAuth
|
|
subjectKeyIdentifier = hash
|
|
authorityKeyIdentifier = keyid
|
|
basicConstraints = CA:false
|
|
authorityInfoAccess = @issuer_info
|
|
crlDistributionPoints = @crl_info
|
|
|
|
[ crl_ext ]
|
|
authorityKeyIdentifier = keyid:always
|
|
authorityInfoAccess = @issuer_info
|
|
|
|
[ issuer_info ]
|
|
caIssuers;URI.0 = http://test.curl.se/ca/EdelCurlRoot.cer
|
|
|
|
[ crl_info ]
|
|
URI.0 = http://test.curl.se/ca/EdelCurlRoot.crl
|
|
|
|
[ req ]
|
|
default_bits = 2048
|
|
distinguished_name = req_DN
|
|
default_md = sha256
|
|
string_mask = utf8only
|
|
|
|
[ req_DN ]
|
|
countryName = "Country Name is Northern Nowhere"
|
|
countryName_value = NN
|
|
organizationName = "Organization Name"
|
|
organizationName_value = Edel Curl Arctic Illudium Research Cloud
|
|
commonName = "Common Name"
|
|
commonName_value = localhost
|