mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-07-05 15:50:51 +02:00
Tobias Frauenschläger
e05a453944
Extend wc_MakeCert_ex/wc_SignCert_ex/wc_MakeCertReq_ex to issue HSS/LMS and
XMSS/XMSS^MT certificates and PKCS#10 requests, building on the existing
RFC 9802 verification support. New LMS_TYPE/XMSS_TYPE/XMSSMT_TYPE selectors,
wc_{Lms,Xmss}Key_PublicKeyToDer SPKI encoders, runtime signature-buffer
sizing, and sigType/key consistency checks. Generation is ASN.1-template
only, matching where the verification path lives.
Tests generate self-signed roots, CSRs and a CA->ECC-leaf chain in-process
and verify them, replacing the patched Bouncy Castle fixtures (only the stock
RFC 9802-aligned LMS interop anchor is kept).
168 lines
5.7 KiB
Plaintext
168 lines
5.7 KiB
Plaintext
# vim:ft=automake
|
|
# All paths should be given relative to the root
|
|
#
|
|
|
|
EXTRA_DIST += \
|
|
certs/ca-cert-chain.der \
|
|
certs/ca-cert.pem \
|
|
certs/ca-key.pem \
|
|
certs/ca-key-pkcs8-attribute.der \
|
|
certs/client-cert.pem \
|
|
certs/client-keyEnc.pem \
|
|
certs/client-key.pem \
|
|
certs/client-uri-cert.pem \
|
|
certs/client-absolute-urn.pem \
|
|
certs/client-relative-uri.pem \
|
|
certs/client-crl-dist.pem \
|
|
certs/client-crl-dist.der \
|
|
certs/ecc-key.pem \
|
|
certs/ecc-keyPub.pem \
|
|
certs/ecc-params.der \
|
|
certs/ecc-params.pem \
|
|
certs/ecc-privkey.der \
|
|
certs/ecc-privkey.pem \
|
|
certs/ecc-privkeyPkcs8.der \
|
|
certs/ecc-privkeyPkcs8.pem \
|
|
certs/ecc-keyPkcs8Enc.pem \
|
|
certs/ecc-keyPkcs8Enc.der \
|
|
certs/ecc-key-comp.pem \
|
|
certs/ecc-keyPkcs8.pem \
|
|
certs/ecc-keyPkcs8.der \
|
|
certs/ecc-client-key.pem \
|
|
certs/ecc-client-keyPub.pem \
|
|
certs/empty-issuer-cert.pem \
|
|
certs/client-ecc-cert.pem \
|
|
certs/client-ecc-ca-cert.pem \
|
|
certs/client-ca.pem \
|
|
certs/client-ca-cert.pem \
|
|
certs/dh2048.pem \
|
|
certs/server-cert.pem \
|
|
certs/server-ecc.pem \
|
|
certs/server-ecc-self.pem \
|
|
certs/server-ecc-comp.pem \
|
|
certs/server-ecc-rsa.pem \
|
|
certs/server-keyEnc.pem \
|
|
certs/server-key.pem \
|
|
certs/server-keyPub.der \
|
|
certs/server-keyPub.pem \
|
|
certs/server-keyPkcs8.der \
|
|
certs/server-keyPkcs8Enc12.pem \
|
|
certs/server-keyPkcs8Enc2.pem \
|
|
certs/server-keyPkcs8Enc.pem \
|
|
certs/server-keyPkcs8Enc.der \
|
|
certs/server-keyPkcs8.pem \
|
|
certs/server-revoked-cert.pem \
|
|
certs/server-revoked-key.pem \
|
|
certs/wolfssl-website-ca.pem \
|
|
certs/test-degenerate.p7b \
|
|
certs/test-multiple-recipients.p7b \
|
|
certs/test-stream-sign.p7b \
|
|
certs/test-stream-dec.p7b \
|
|
certs/test-ber-exp02-05-2022.p7b \
|
|
certs/test-servercert.p12 \
|
|
certs/test-servercert-rc2.p12 \
|
|
certs/ecc-rsa-server.p12 \
|
|
certs/dsaparams.der \
|
|
certs/dsaparams.pem \
|
|
certs/ecc-privOnlyKey.pem \
|
|
certs/ecc-privOnlyCert.pem \
|
|
certs/dh3072.pem \
|
|
certs/dh4096.pem \
|
|
certs/client-cert-ext.pem \
|
|
certs/csr.attr.der \
|
|
certs/csr.dsa.der \
|
|
certs/csr.dsa.pem \
|
|
certs/csr.signed.der \
|
|
certs/csr.ext.der \
|
|
certs/entity-no-ca-bool-cert.pem \
|
|
certs/entity-no-ca-bool-key.pem \
|
|
certs/x942dh2048.der \
|
|
certs/x942dh2048.pem \
|
|
certs/fpki-cert.der \
|
|
certs/fpki-certpol-cert.der \
|
|
certs/rid-cert.der \
|
|
certs/dh-priv-2048.der \
|
|
certs/dh-priv-2048.pem \
|
|
certs/dh-pub-2048.der \
|
|
certs/dh-pub-2048.pem \
|
|
certs/dsa2048.pem
|
|
|
|
EXTRA_DIST += \
|
|
certs/aia/ca-issuers-cert.pem \
|
|
certs/aia/multi-aia-cert.pem \
|
|
certs/aia/overflow-aia-cert.pem \
|
|
certs/sia/timestamping-sia-cert.pem
|
|
|
|
EXTRA_DIST += \
|
|
certs/ca-key.der \
|
|
certs/ca-cert.der \
|
|
certs/client-cert.der \
|
|
certs/client-key.der \
|
|
certs/client-ecc-cert.der \
|
|
certs/client-ecc-ca-cert.der \
|
|
certs/client-ca-cert.der \
|
|
certs/client-keyPub.der \
|
|
certs/client-keyPub.pem \
|
|
certs/dh2048.der \
|
|
certs/dh3072.der \
|
|
certs/dh4096.der \
|
|
certs/dh-pubkey-2048.der \
|
|
certs/rsa2048.der \
|
|
certs/rsa-pub-2048.pem \
|
|
certs/rsa3072.der \
|
|
certs/dsa2048.der \
|
|
certs/dsa3072.der \
|
|
certs/dsa-pubkey-2048.der \
|
|
certs/ecc-client-key.der \
|
|
certs/ecc-client-keyPub.der \
|
|
certs/ecc-key.der \
|
|
certs/ecc-keyPub.der \
|
|
certs/server-key.der \
|
|
certs/server-cert.der \
|
|
certs/server-ecc-comp.der \
|
|
certs/server-ecc.der \
|
|
certs/server-ecc-self.der \
|
|
certs/server-ecc-rsa.der \
|
|
certs/server-cert-chain.der \
|
|
certs/client-cert-ext.der
|
|
|
|
# ECC CA prime256v1
|
|
EXTRA_DIST += \
|
|
certs/ca-ecc-cert.der \
|
|
certs/ca-ecc-cert.pem \
|
|
certs/ca-ecc-key.der \
|
|
certs/ca-ecc-key.pem
|
|
|
|
# ECC CA SECP384R1
|
|
EXTRA_DIST += \
|
|
certs/ca-ecc384-cert.der \
|
|
certs/ca-ecc384-cert.pem \
|
|
certs/ca-ecc384-key.der \
|
|
certs/ca-ecc384-key.pem
|
|
|
|
dist_doc_DATA+= certs/taoCert.txt
|
|
|
|
include certs/1024/include.am
|
|
include certs/3072/include.am
|
|
include certs/4096/include.am
|
|
include certs/crl/include.am
|
|
include certs/ecc/include.am
|
|
include certs/ed25519/include.am
|
|
include certs/ed448/include.am
|
|
include certs/p521/include.am
|
|
include certs/sm2/include.am
|
|
include certs/external/include.am
|
|
include certs/ocsp/include.am
|
|
include certs/statickeys/include.am
|
|
include certs/test/include.am
|
|
include certs/test-pathlen/include.am
|
|
include certs/test-serial0/include.am
|
|
include certs/intermediate/include.am
|
|
include certs/falcon/include.am
|
|
include certs/rsapss/include.am
|
|
include certs/slhdsa/include.am
|
|
include certs/lms/include.am
|
|
include certs/rpk/include.am
|
|
include certs/acert/include.am
|
|
include certs/mldsa/include.am
|