diff --git a/certs/crl/cliCrl.pem b/certs/crl/cliCrl.pem index 8915758bb..0d285037e 100644 --- a/certs/crl/cliCrl.pem +++ b/certs/crl/cliCrl.pem @@ -2,38 +2,38 @@ Certificate Revocation List (CRL): Version 2 (0x1) Signature Algorithm: sha1WithRSAEncryption Issuer: /C=US/ST=Montana/L=Bozeman/O=wolfSSL/OU=Programming/CN=www.wolfssl.com/emailAddress=info@wolfssl.com - Last Update: Jul 11 20:39:48 2014 GMT - Next Update: Jul 11 20:39:48 2015 GMT + Last Update: Feb 2 18:17:42 2015 GMT + Next Update: Oct 29 18:17:42 2017 GMT CRL extensions: X509v3 CRL Number: - 2 + 3 No Revoked Certificates. Signature Algorithm: sha1WithRSAEncryption - 35:c1:34:91:04:d9:88:99:83:40:ef:09:ee:04:28:91:be:7a: - b1:84:48:f4:f8:c5:9d:50:6c:67:56:4c:ee:b2:3a:32:5c:1d: - 1c:49:ef:58:72:a7:69:71:9a:d8:a6:68:0c:3e:ff:48:15:c7: - 44:28:67:6b:34:9d:c0:dc:c5:1b:d1:2f:e6:90:0f:45:7c:aa: - 0c:f9:3c:19:dd:55:a0:92:8a:a0:fe:93:1d:1f:42:ae:5f:7c: - 48:a5:de:61:89:94:bf:43:d3:c1:2d:e8:8b:f9:c5:6e:b9:8a: - 40:0e:6e:32:5e:39:83:cb:9b:76:6b:de:6e:6c:da:4e:1e:5c: - 69:d6:8c:08:0e:9f:de:4e:77:9d:f5:e9:97:29:b3:4c:e0:cb: - ed:46:68:ed:e1:89:ac:d7:b9:11:ca:5a:ed:fe:e3:73:20:6e: - 01:e6:77:a8:48:c7:01:83:40:25:a5:ee:d7:ef:2f:af:b8:e2: - 2d:85:37:2a:80:8f:7f:6a:a7:32:29:86:42:66:40:d7:eb:87: - 44:66:54:5f:04:5f:7b:22:14:6c:4c:5d:f0:57:ac:33:e0:da: - 53:d6:13:52:ea:85:b2:89:de:41:e6:a6:f5:0d:34:47:37:75: - 26:b8:c4:f3:e0:1b:c6:32:3f:3b:65:0a:20:08:8e:c7:7e:6d: - 61:f1:aa:eb + 3d:4b:e6:b5:04:8a:9c:26:d1:cb:c2:ce:12:bd:63:8e:23:91: + 23:48:51:b8:70:48:02:32:a4:6a:b7:83:6d:3d:83:76:c4:3d: + a5:80:42:d7:72:94:3b:0d:e9:b2:9a:5f:47:56:2a:fa:b9:7f: + 46:0e:34:8f:e1:b5:47:1b:21:ca:ed:9a:eb:09:8a:d7:23:e8: + f7:58:61:19:82:79:ac:21:7e:56:15:fa:f4:a4:ec:a8:54:ae: + d7:33:e0:65:96:ff:d7:a9:f5:ad:a6:d4:83:ca:03:dd:92:f2: + 0a:e3:61:e2:7e:8e:3f:7f:67:80:4c:41:28:54:2c:c4:75:90: + dd:88:fe:3b:a8:c0:e5:55:a3:7b:83:ab:82:b7:7e:63:6e:78: + 5e:bd:ee:08:e1:5f:41:b6:d3:89:c9:6c:26:55:c7:e0:dd:8a: + e0:7f:cc:8c:7d:61:37:ab:32:0c:e2:0f:e0:64:80:a6:47:7b: + 31:db:8d:8d:fe:85:5c:bb:84:3d:66:10:ce:eb:f7:99:dd:7c: + c9:e1:5c:ef:8e:17:6b:a5:c3:5c:55:bb:f3:b1:d6:74:47:94: + 1f:d6:bd:27:88:80:94:70:16:58:d0:ce:cf:ea:91:ef:f2:77: + 46:f2:5a:38:48:5c:d7:ba:fb:50:26:3f:2d:8e:b6:1a:92:09: + e6:11:5e:71 -----BEGIN X509 CRL----- MIIB7jCB1wIBATANBgkqhkiG9w0BAQUFADCBlDELMAkGA1UEBhMCVVMxEDAOBgNV BAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xEDAOBgNVBAoMB3dvbGZTU0wx FDASBgNVBAsMC1Byb2dyYW1taW5nMRgwFgYDVQQDDA93d3cud29sZnNzbC5jb20x -HzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTE0MDcxMTIwMzk0OFoX -DTE1MDcxMTIwMzk0OFqgDjAMMAoGA1UdFAQDAgECMA0GCSqGSIb3DQEBBQUAA4IB -AQA1wTSRBNmImYNA7wnuBCiRvnqxhEj0+MWdUGxnVkzusjoyXB0cSe9YcqdpcZrY -pmgMPv9IFcdEKGdrNJ3A3MUb0S/mkA9FfKoM+TwZ3VWgkoqg/pMdH0KuX3xIpd5h -iZS/Q9PBLeiL+cVuuYpADm4yXjmDy5t2a95ubNpOHlxp1owIDp/eTned9emXKbNM -4MvtRmjt4Yms17kRylrt/uNzIG4B5neoSMcBg0Alpe7X7y+vuOIthTcqgI9/aqcy -KYZCZkDX64dEZlRfBF97IhRsTF3wV6wz4NpT1hNS6oWyid5B5qb1DTRHN3UmuMTz -4BvGMj87ZQogCI7Hfm1h8arr +HzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTE1MDIwMjE4MTc0MloX +DTE3MTAyOTE4MTc0MlqgDjAMMAoGA1UdFAQDAgEDMA0GCSqGSIb3DQEBBQUAA4IB +AQA9S+a1BIqcJtHLws4SvWOOI5EjSFG4cEgCMqRqt4NtPYN2xD2lgELXcpQ7Demy +ml9HVir6uX9GDjSP4bVHGyHK7ZrrCYrXI+j3WGEZgnmsIX5WFfr0pOyoVK7XM+Bl +lv/XqfWtptSDygPdkvIK42Hifo4/f2eATEEoVCzEdZDdiP47qMDlVaN7g6uCt35j +bnheve4I4V9BttOJyWwmVcfg3Yrgf8yMfWE3qzIM4g/gZICmR3sx242N/oVcu4Q9 +ZhDO6/eZ3XzJ4VzvjhdrpcNcVbvzsdZ0R5Qf1r0niICUcBZY0M7P6pHv8ndG8lo4 +SFzXuvtQJj8tjrYakgnmEV5x -----END X509 CRL----- diff --git a/certs/crl/crl.pem b/certs/crl/crl.pem index f4e18434e..83666b80c 100644 --- a/certs/crl/crl.pem +++ b/certs/crl/crl.pem @@ -2,38 +2,38 @@ Certificate Revocation List (CRL): Version 2 (0x1) Signature Algorithm: sha1WithRSAEncryption Issuer: /C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com - Last Update: Jul 11 20:36:35 2014 GMT - Next Update: Jul 11 20:36:35 2015 GMT + Last Update: Feb 2 18:17:42 2015 GMT + Next Update: Oct 29 18:17:42 2017 GMT CRL extensions: X509v3 CRL Number: 1 No Revoked Certificates. Signature Algorithm: sha1WithRSAEncryption - b4:54:84:e9:f8:c3:5c:e4:c4:a1:9a:71:eb:bc:46:96:09:bd: - 84:9d:4c:ac:29:a8:23:12:9d:80:8e:18:30:85:92:94:72:04: - 6d:74:05:31:e0:1b:20:b1:ef:6f:44:98:e8:d4:20:74:b1:ec: - 9f:fe:ad:74:14:66:ad:6f:5b:7a:45:02:b5:6f:a8:d3:bd:dc: - 88:94:d1:e2:78:e1:11:44:95:57:7d:d9:8c:7e:09:dc:aa:4f: - 07:e0:59:f2:09:30:d5:7c:a0:6c:54:88:d0:76:88:33:11:61: - 20:9d:3d:89:49:3b:85:be:e7:c0:38:f1:08:be:44:7a:1d:4c: - e4:84:7a:40:23:6f:85:bd:67:7b:77:7e:00:78:d2:3c:e2:a8: - 47:ba:5c:21:c4:78:15:81:a2:9e:a6:9c:c4:47:4c:ee:97:81: - 18:91:5e:18:2b:92:e8:06:1f:dc:f2:51:e1:b3:14:bf:c3:c5: - 9c:78:ce:41:2e:61:0b:71:ad:ea:9e:2d:bb:2e:e4:98:a9:14: - 47:3f:00:65:4e:09:17:82:ee:be:ea:48:1e:2e:a5:92:64:ce: - e9:b1:ee:ce:01:5b:e8:e3:fe:ba:dd:8c:eb:ad:34:32:15:00: - 56:4d:fe:9d:60:bf:a1:cd:9e:1b:61:94:21:0a:b1:98:4f:ec: - c1:af:b3:dc + 78:4e:6d:3d:25:58:cf:eb:b5:7c:c3:3b:79:af:45:b8:8c:84: + 36:61:0e:b0:66:63:3b:7e:0f:f0:2a:09:6d:70:1b:5f:c6:ae: + 9d:42:c7:1f:d5:86:5c:7e:c5:63:e5:11:99:4b:42:a3:8e:40: + 07:93:27:83:01:ec:5e:a8:1a:88:d3:4d:41:9d:f4:10:e6:57: + 33:b9:6c:7b:ba:01:cc:17:6a:4b:2f:4f:20:39:2a:21:b9:15: + b4:a5:60:ca:f0:92:af:0b:bc:a1:df:06:b0:7a:49:d4:2c:0a: + 46:a5:0c:20:a6:00:7e:58:4a:5c:2a:44:c3:f0:31:9e:d0:e3: + ec:be:41:69:dc:32:f3:b3:a5:52:25:ed:5e:ad:3e:f9:38:65: + 55:72:65:61:7a:0c:2d:11:84:f7:b4:b4:36:f4:ba:fa:5f:b3: + a0:8a:09:6f:06:44:74:ac:40:f2:60:9e:37:96:68:49:fc:d1: + 2c:1d:98:1f:e1:d3:48:22:85:64:49:b2:05:2a:cf:47:b4:15: + 3d:e6:ae:d8:83:6e:e7:34:d3:fe:9b:89:b0:3d:cf:7e:3e:bf: + 75:7f:27:0d:cb:7b:63:a7:69:d1:31:8f:7f:99:b2:34:f8:09: + 60:37:2d:db:1c:65:5f:77:e5:e6:0d:a8:0c:ee:57:a6:65:df: + 98:3b:07:b8 -----BEGIN X509 CRL----- MIIB7jCB1wIBATANBgkqhkiG9w0BAQUFADCBlDELMAkGA1UEBhMCVVMxEDAOBgNV BAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNhd3Rvb3Ro MRMwEQYDVQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNzbC5jb20x -HzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTE0MDcxMTIwMzYzNVoX -DTE1MDcxMTIwMzYzNVqgDjAMMAoGA1UdFAQDAgEBMA0GCSqGSIb3DQEBBQUAA4IB -AQC0VITp+MNc5MShmnHrvEaWCb2EnUysKagjEp2AjhgwhZKUcgRtdAUx4Bsgse9v -RJjo1CB0seyf/q10FGatb1t6RQK1b6jTvdyIlNHieOERRJVXfdmMfgncqk8H4Fny -CTDVfKBsVIjQdogzEWEgnT2JSTuFvufAOPEIvkR6HUzkhHpAI2+FvWd7d34AeNI8 -4qhHulwhxHgVgaKeppzER0zul4EYkV4YK5LoBh/c8lHhsxS/w8WceM5BLmELca3q -ni27LuSYqRRHPwBlTgkXgu6+6kgeLqWSZM7pse7OAVvo4/663YzrrTQyFQBWTf6d -YL+hzZ4bYZQhCrGYT+zBr7Pc +HzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTE1MDIwMjE4MTc0MloX +DTE3MTAyOTE4MTc0MlqgDjAMMAoGA1UdFAQDAgEBMA0GCSqGSIb3DQEBBQUAA4IB +AQB4Tm09JVjP67V8wzt5r0W4jIQ2YQ6wZmM7fg/wKgltcBtfxq6dQscf1YZcfsVj +5RGZS0KjjkAHkyeDAexeqBqI001BnfQQ5lczuWx7ugHMF2pLL08gOSohuRW0pWDK +8JKvC7yh3waweknULApGpQwgpgB+WEpcKkTD8DGe0OPsvkFp3DLzs6VSJe1erT75 +OGVVcmVhegwtEYT3tLQ29Lr6X7OgiglvBkR0rEDyYJ43lmhJ/NEsHZgf4dNIIoVk +SbIFKs9HtBU95q7Yg27nNNP+m4mwPc9+Pr91fycNy3tjp2nRMY9/mbI0+AlgNy3b +HGVfd+XmDagM7lemZd+YOwe4 -----END X509 CRL----- diff --git a/certs/crl/crl.revoked b/certs/crl/crl.revoked index 205acfe88..b60b06e41 100644 --- a/certs/crl/crl.revoked +++ b/certs/crl/crl.revoked @@ -1,13 +1,41 @@ +Certificate Revocation List (CRL): + Version 2 (0x1) + Signature Algorithm: sha1WithRSAEncryption + Issuer: /C=US/ST=Montana/L=Bozeman/O=Sawtooth/OU=Consulting/CN=www.wolfssl.com/emailAddress=info@wolfssl.com + Last Update: Feb 2 18:17:42 2015 GMT + Next Update: Oct 29 18:17:42 2017 GMT + CRL extensions: + X509v3 CRL Number: + 2 +Revoked Certificates: + Serial Number: 01 + Revocation Date: Feb 2 18:17:42 2015 GMT + Signature Algorithm: sha1WithRSAEncryption + 05:a6:8a:d0:04:f9:2b:f8:43:7e:49:91:1a:9d:8b:7a:77:a0: + 10:fa:ee:32:84:2b:bc:38:f8:f4:29:93:70:2f:fe:c1:11:a8: + aa:d2:44:55:6e:39:65:e3:c7:6d:93:c3:cf:91:9f:30:13:62: + 12:d0:db:c0:1c:97:18:c7:7b:9a:47:2a:cc:3b:21:fe:5c:fa: + 73:71:d4:c8:f3:e1:08:7b:03:42:16:0d:46:c9:cc:dd:31:0a: + 78:8e:96:db:fa:5f:f6:f4:d9:08:f5:33:0b:c5:9e:cc:c9:0f: + dc:df:21:1c:01:3e:ee:d9:40:63:3b:fd:a4:01:f6:b8:b6:e5: + f1:af:9b:71:9d:01:15:84:92:f7:2b:63:ba:ac:ce:c8:1f:16: + cc:11:75:89:da:6e:b4:b7:3e:a6:cd:eb:2a:0f:16:bb:dd:8c: + d5:ee:8d:74:66:10:6e:73:d9:17:6a:bf:64:68:70:56:19:34: + e3:93:c9:8a:13:23:5c:50:ef:e1:3e:32:84:7f:f7:c5:bf:80: + 06:b8:d1:1b:bd:ca:cb:c1:f7:58:d6:ca:86:ed:c2:34:4a:72: + c2:9a:93:ff:62:4f:72:ad:92:ae:de:6f:8e:25:91:7c:7a:76: + dc:f5:56:f3:df:8c:d3:fb:6e:4a:df:e3:58:4f:29:bf:d7:4b: + 2d:4e:69:51 -----BEGIN X509 CRL----- -MIICBDCB7QIBATANBgkqhkiG9w0BAQsFADCBlDELMAkGA1UEBhMCVVMxEDAOBgNV +MIICBDCB7QIBATANBgkqhkiG9w0BAQUFADCBlDELMAkGA1UEBhMCVVMxEDAOBgNV BAgMB01vbnRhbmExEDAOBgNVBAcMB0JvemVtYW4xETAPBgNVBAoMCFNhd3Rvb3Ro MRMwEQYDVQQLDApDb25zdWx0aW5nMRgwFgYDVQQDDA93d3cud29sZnNzbC5jb20x -HzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTE0MDcxMTEyMzUyN1oX -DTE1MDcxMTEyMzUyN1owFDASAgEBFw0xNDA3MTExMjM1MjdaoA4wDDAKBgNVHRQE -AwIBOzANBgkqhkiG9w0BAQsFAAOCAQEAB+ao48FzCAbRKKPkFJX8Ho5SZl44YhNW -Uy/JxMkonyjyaMwp7GSwd2hNpv3geC6tHO7YLSRcyvyKu1BQVbeoa6FpultQSv5+ -twk6mmeSenzhzNhfJmzSEhJicXOgBoLAh4aBXkixQis9dAVg16/nNSS2DAJwEKMW -kXcJpuBLt6XLL0aM71+NDqB8HAUUPyuNWLiYEb4NlScIWNh7lI6ZWmsv8vb1PMmn -2hn4CVJIkHkfEHYnikek55iE31QMUyobCXzro+cR9jGR1iPZSQu9dxstRHF5bXai -eBYWZIblBVCSJ896a5TJ5uaA1RKk6ZZbAG43oQTB/hupaEPjTTXysw== +HzAdBgkqhkiG9w0BCQEWEGluZm9Ad29sZnNzbC5jb20XDTE1MDIwMjE4MTc0MloX +DTE3MTAyOTE4MTc0MlowFDASAgEBFw0xNTAyMDIxODE3NDJaoA4wDDAKBgNVHRQE +AwIBAjANBgkqhkiG9w0BAQUFAAOCAQEABaaK0AT5K/hDfkmRGp2LenegEPruMoQr +vDj49CmTcC/+wRGoqtJEVW45ZePHbZPDz5GfMBNiEtDbwByXGMd7mkcqzDsh/lz6 +c3HUyPPhCHsDQhYNRsnM3TEKeI6W2/pf9vTZCPUzC8WezMkP3N8hHAE+7tlAYzv9 +pAH2uLbl8a+bcZ0BFYSS9ytjuqzOyB8WzBF1idputLc+ps3rKg8Wu92M1e6NdGYQ +bnPZF2q/ZGhwVhk045PJihMjXFDv4T4yhH/3xb+ABrjRG73Ky8H3WNbKhu3CNEpy +wpqT/2JPcq2Srt5vjiWRfHp23PVW89+M0/tuSt/jWE8pv9dLLU5pUQ== -----END X509 CRL----- diff --git a/certs/crl/gencrls.sh b/certs/crl/gencrls.sh index 2afbecfe1..a18ecf3f7 100755 --- a/certs/crl/gencrls.sh +++ b/certs/crl/gencrls.sh @@ -5,7 +5,7 @@ # caCrl -openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 365 -out crl.pem -keyfile ../ca-key.pem -cert ../ca-cert.pem +openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out crl.pem -keyfile ../ca-key.pem -cert ../ca-cert.pem # metadata openssl crl -in crl.pem -text > tmp @@ -17,7 +17,7 @@ mv tmp crl.pem openssl ca -config ../renewcerts/wolfssl.cnf -revoke ../server-cert.pem -keyfile ../ca-key.pem -cert ../ca-cert.pem # caCrl server revoked generation -openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 365 -out crl.revoked -keyfile ../ca-key.pem -cert ../ca-cert.pem +openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out crl.revoked -keyfile ../ca-key.pem -cert ../ca-cert.pem # metadata openssl crl -in crl.revoked -text > tmp @@ -29,7 +29,7 @@ mv tmp crl.revoked cp blank.index.txt demoCA/index.txt # cliCrl -openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 365 -out cliCrl.pem -keyfile ../client-key.pem -cert ../client-cert.pem +openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out cliCrl.pem -keyfile ../client-key.pem -cert ../client-cert.pem # metadata openssl crl -in cliCrl.pem -text > tmp @@ -38,7 +38,7 @@ mv tmp cliCrl.pem #cp cliCrl.pem ~/wolfssl/certs/crl/cliCrl.pem # eccCliCRL -openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 365 -out eccCliCRL.pem -keyfile ../ecc-client-key.pem -cert ../client-ecc-cert.pem +openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out eccCliCRL.pem -keyfile ../ecc-client-key.pem -cert ../client-ecc-cert.pem # metadata openssl crl -in eccCliCRL.pem -text > tmp @@ -47,7 +47,7 @@ mv tmp eccCliCRL.pem #cp eccCliCRL.pem ~/wolfssl/certs/crl/eccCliCRL.pem # eccSrvCRL -openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 365 -out eccSrvCRL.pem -keyfile ../ecc-key.pem -cert ../server-ecc.pem +openssl ca -config ../renewcerts/wolfssl.cnf -gencrl -crldays 1000 -out eccSrvCRL.pem -keyfile ../ecc-key.pem -cert ../server-ecc.pem # metadata openssl crl -in eccSrvCRL.pem -text > tmp