openstack/anchor
Code Issues Proposed changes

Remove outdated hashing algorithms

Browse Source 
Remove outdated hashing algorithms like Sha1 and Md5. Also
update the test cases to replace certificates and CSR signed by
Sha1 with new examples signed by Sha256. Made changes to test
cases so that they match new certificate and CSR examples.

Change-Id: I69d022236b5fde2be1da2e88554c2c76566c8d6c
This commit is contained in:
Michael Xin
2015-09-01 13:10:18 -07:00
committed by michael xin
parent c457c4bcd6
commit d4d052c0c1
7 changed files with 93 additions and 120 deletions
Download Patch File Download Diff File Expand all files Collapse all files

97
tests/CA/root-ca.crt
View File

@@ -1,61 +1,58 @@
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a9:d8:fe:87:d0:95:01:12
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=UK, ST=Some-State, O=OSSG, CN=anchor.example.com
Serial Number: 16983733478354280881 (0xebb2579d693761b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=AU, ST=Some-State, O=Herp Derp plc, OU=herp.derp.plc, CN=herp.derp.plc
Validity
Not Before: Mar 6 11:44:40 2015 GMT
Not After : Mar 5 11:44:40 2018 GMT
Subject: C=UK, ST=Some-State, O=OSSG, CN=anchor.example.com
Not Before: Sep 1 23:29:35 2015 GMT
Not After : Sep 2 23:29:35 2015 GMT
Subject: C=AU, ST=Some-State, O=Herp Derp plc, OU=herp.derp.plc, CN=herp.derp.plc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:d7:4c:80:83:75:7b:60:c8:ca:a6:7c:5a:2b:8f:
8f:67:af:89:0e:05:cb:3d:01:d1:bc:e6:22:06:08:
4a:d1:60:2d:6d:0b:a4:b3:bf:51:3e:95:b9:4e:7d:
a7:44:c9:fd:27:ca:4a:32:a6:d2:b7:68:f8:17:6b:
94:be:18:6b:b6:cd:54:90:a1:79:a9:8b:16:dd:02:
bd:8c:22:e0:23:72:71:de:a2:62:b3:12:3c:a3:35:
c6:f0:6b:96:04:96:14:88:df:2a:62:5f:6f:19:08:
59:dc:6d:52:14:37:c6:94:76:97:e3:64:29:c9:28:
13:e9:52:04:fe:18:6c:4e:17
Public-Key: (1024 bit)
Modulus:
00:9e:7a:a8:35:41:e7:1c:bf:c8:6a:8f:50:4f:f4:
a1:09:5f:94:2c:14:2c:51:eb:63:3c:a6:53:db:e6:
de:2c:2e:8f:14:61:f6:5d:ea:41:4b:70:e3:fc:c7:
3c:30:bf:1f:de:15:8e:92:bb:1e:76:7a:74:35:f7:
ba:3c:68:cc:32:3f:be:e1:32:16:6a:b5:df:0d:0a:
02:c9:31:59:54:6d:18:70:2e:d8:b4:4a:41:c5:3e:
27:34:c0:08:3e:7a:c7:d7:6b:ac:a1:77:94:f1:0b:
e6:ed:8b:b3:20:57:f9:63:03:cd:17:43:11:c7:f3:
13:a3:74:ea:06:37:40:c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:35:71:FD:CB:C7:5B:2F:C0:02:C2:2E:3B:9D:7B:FD:6F:CB:BB:9C
X509v3 Authority Key Identifier:
keyid:56:35:71:FD:CB:C7:5B:2F:C0:02:C2:2E:3B:9D:7B:FD:6F:CB:BB:9C
DirName:/C=UK/ST=Some-State/O=OSSG/CN=anchor.example.com
serial:A9:D8:FE:87:D0:95:01:12
X509v3 Subject Key Identifier:
DE:D6:97:31:61:61:AB:34:2F:EE:92:CB:85:96:80:86:BF:8D:60:DD
X509v3 Authority Key Identifier:
keyid:DE:D6:97:31:61:61:AB:34:2F:EE:92:CB:85:96:80:86:BF:8D:60:DD
X509v3 Basic Constraints:
X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha1WithRSAEncryption
02:2e:25:2c:7b:ab:d5:cf:98:a7:ee:40:c6:d3:f2:45:4b:1f:
40:a9:f5:1f:17:2e:1c:96:f8:fa:34:2b:05:e4:e7:f3:94:31:
a6:d9:cc:d4:fa:0c:71:f0:23:7e:d4:c2:84:f0:d6:25:14:41:
24:aa:52:98:36:a8:37:fa:9f:12:3f:2f:17:22:db:35:1a:01:
2e:ff:02:de:f5:12:3b:40:7d:7e:c2:80:c6:9a:66:4d:ba:c5:
43:a8:0f:ec:d3:9c:7c:ec:23:a6:40:6e:a2:c3:5d:e5:1f:78:
cf:da:44:ab:26:b8:91:a5:ef:0f:2e:ce:b9:eb:2a:06:21:88:
e5:2a
Signature Algorithm: sha256WithRSAEncryption
9a:50:80:40:5a:11:3d:99:0c:85:0a:68:e2:ad:8a:c9:db:c0:
9d:2f:80:1a:f6:52:cb:bd:5d:3c:de:41:b3:50:76:d9:d9:7a:
e9:ae:97:f4:68:dc:78:4c:90:82:5f:e9:57:17:70:49:26:18:
2b:ab:96:b7:26:0d:6f:63:4e:fd:40:6c:44:6a:5f:b9:26:76:
8d:1b:4a:74:3b:b2:cf:b5:cc:5b:50:a6:ea:1c:67:3a:13:29:
69:93:e2:b6:9e:14:97:a0:b2:3f:5f:3a:f4:c9:7f:5d:5a:7a:
7c:95:d4:2c:dc:83:a2:ba:5f:a9:10:de:f7:80:3d:e6:63:e8:
5b:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----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-----END CERTIFICATE-----