-
Notifications
You must be signed in to change notification settings - Fork 135
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update test for CA with CMC shared token
The test for CA with CMC shared token has been updated to perform a certificate revocation then validate the audit events.
- Loading branch information
Showing
4 changed files
with
194 additions
and
9 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
25 changes: 25 additions & 0 deletions
25
base/tools/examples/cmc/testuser-cmc-revocation-request.cfg
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
# NSS database directory where the client certificate is stored | ||
dbdir=/root/.dogtag/nssdb | ||
|
||
# NSS database password | ||
password= | ||
|
||
# Token name (default is internal) | ||
tokenname=internal | ||
|
||
# Request format: pkcs10 or crmf | ||
format=pkcs10 | ||
|
||
# Total number of PKCS10/CRMF requests | ||
numRequests=1 | ||
|
||
# Path for the CMC request | ||
output=testuser.cmc-revocation-request | ||
|
||
# Revocation parameters | ||
revRequest.enable=true | ||
revRequest.serial= | ||
revRequest.reason=unspecified | ||
revRequest.issuer=cn=CA Signing Certificate,ou=pki-tomcat,o=EXAMPLE | ||
revRequest.sharedSecret=Secret.123 | ||
revRequest.comment= |
33 changes: 33 additions & 0 deletions
33
base/tools/examples/cmc/testuser-cmc-revocation-submit.cfg
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,33 @@ | ||
# PKI server host name | ||
host=pki.example.com | ||
|
||
# PKI server port number | ||
port=8443 | ||
|
||
# Use secure connection. | ||
# For secure connection with ECC, set environment variable 'export NSS_USE_DECODED_CKA_EC_POINT=1'. | ||
secure=true | ||
|
||
# Use client authentication. | ||
clientmode=true | ||
|
||
# NSS database directory where the client certificate is stored | ||
dbdir=/root/.dogtag/nssdb | ||
|
||
# NSS database password | ||
password= | ||
|
||
# Token name (default: internal) | ||
tokenname=internal | ||
|
||
# Nickname of client certificate | ||
nickname=testuser | ||
|
||
# CMC servlet path | ||
servlet=/ca/ee/ca/profileSubmitUserSignedCMCFull | ||
|
||
# Path for the CMC request | ||
input=testuser.cmc-revocation-request | ||
|
||
# Path for the CMC response | ||
output=testuser.cmc-revocation-response |