diff options
Diffstat (limited to 'jstests/ssl/x509/certs.yml')
| -rw-r--r-- | jstests/ssl/x509/certs.yml | 31 |
1 files changed, 10 insertions, 21 deletions
diff --git a/jstests/ssl/x509/certs.yml b/jstests/ssl/x509/certs.yml index e0aae5afd1b..b2f50d283ba 100644 --- a/jstests/ssl/x509/certs.yml +++ b/jstests/ssl/x509/certs.yml @@ -528,26 +528,6 @@ certs: keyUsage: [digitalSignature, keyEncipherment] extendedKeyUsage: [serverAuth, clientAuth] -- name: 'server_ocsp_invalid.pem' - description: >- - An expired OCSP certificate for the mongodb server. - Subject: - CN: 'badHost' - C: US - ST: NY - L: OCSP-1 - Issuer: 'ca_ocsp.pem' - include_header: false - output_path: 'jstests/libs/ocsp/' - extensions: - basicConstraints: {CA: false} - subjectAltName: - DNS: badHost - authorityInfoAccess: 'OCSP;URI:http://localhost:8100/status' - subjectKeyIdentifier: hash - keyUsage: [digitalSignature, keyEncipherment] - extendedKeyUsage: [serverAuth, clientAuth] - - name: 'server_ocsp_revoked.pem' description: >- OCSP certificate for the mongodb server. @@ -768,10 +748,19 @@ certs: # Split Horizon ### +- name: 'splithorizon-ca.pem' + description: CA for split horizon testing. + Subject: {O: 'MongoDB, Inc.', CN: 'Kernel Split Horizon Test CA'} + Issuer: self + extensions: + subjectKeyIdentifier: hash + authorityKeyIdentifier: keyid + basicConstraints: {CA: true} + - name: 'splithorizon-server.pem' description: Server certificate for split horizon testing. Subject: {O: 'MongoDB, Inc. (Splithorizon)', CN: 'server'} - Issuer: 'ca.pem' + Issuer: 'splithorizon-ca.pem' extensions: extendedKeyUsage: [serverAuth, clientAuth] subjectAltName: |