test: generate script for testing certs and keys (#2161)

quic/s2n-quic-core/certs/cert.pem

@@ -1,10 +1,15 @@
------BEGIN CERTIFICATE-----
-MIIBeDCCAR6gAwIBAgIBKjAKBggqhkjOPQQDAjAwMRgwFgYDVQQKDA9DcmFiIHdp
-ZGdpdHMgU0UxFDASBgNVBAMMC01hc3RlciBDZXJ0MCIYDzE5NzUwMTAxMDAwMDAw
-WhgPNDA5NjAxMDEwMDAwMDBaMDAxGDAWBgNVBAoMD0NyYWIgd2lkZ2l0cyBTRTEU
-MBIGA1UEAwwLTWFzdGVyIENlcnQwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQb
-bVPayLOdbKxXB4yB4Vx3Kf2Z89vsUvhmiICsjncRwBEKkP+GjTg1bSEloLvzuha9
-3u78xp2/1ZaeqtVwYgJMoyUwIzAhBgNVHREEGjAYggtxbGF3cy5xbGF3c4IJbG9j
-YWxob3N0MAoGCCqGSM49BAMCA0gAMEUCIDrxPoQBu9G/g54f3TKYXj8bO2fdkPD1
-PMO712Y3e0eNAiEA9mt1NW6TDPVf+xmUA/swi8gnhlusV2Y1sB4qhDCPr9c=
------END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

quic/s2n-quic-core/certs/cert_pkcs1.pem

@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

quic/s2n-quic-core/certs/config/ca.cnf

@@ -0,0 +1,21 @@
+[ req ]
+prompt = no
+distinguished_name = ca_distinguished_name
+x509_extensions=ext
+
+[ ca_distinguished_name ]
+# country name
+C = JP
+# state or province
+ST = Chiba
+L = Chiba City
+O = Tessier-Ashpool
+CN = localca
+emailAddress = ca@develop.localca
+[ ext ]
+subjectAltName = @alt_names
+[alt_names]
+DNS.1 = localhost
+DNS.2 = qlaws.qlaws
+IP.1 = 127.0.0.1
+IP.2 = ::1

quic/s2n-quic-core/certs/generate_certs.sh

@@ -0,0 +1,30 @@
+# Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+# immediately bail if any command fails
+set -e
+
+echo "generating pem CA private key and certificate"
+openssl req -new -newkey ec -pkeyopt ec_paramgen_curve:prime256v1 -x509 -nodes -out cert.pem -keyout key.pem -days 65536 -config config/ca.cnf
+
+
+echo "generating PKCS #1 encoded CA private key and certificate"
+openssl genrsa -f4 -out key_pkcs1.pem 2048
+openssl req -new -x509 -key key_pkcs1.pem -out cert_pkcs1.pem -days 65536 -config config/ca.cnf
+
+echo "converting pem to der"
+openssl x509 -outform der -inform pem -in cert.pem -out cert.der
+openssl pkcs8 -topk8 -nocrypt -outform DER -in key.pem -out key.der
+
+# The following commands can be used to generate new der encoded cert/key
+# instead of converting pem to der
+# echo "generating der CA private key and certificate"
+# openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:prime256v1 | \
+#     openssl pkcs8 -topk8 -nocrypt -outform DER > key.der
+# openssl req -new -x509 -outform DER -keyform DER -key key.der -out cert.der -days 65536 -config config/ca.cnf
+
+
+
+# 'untrusted' here means that the cert will be untrusted by other certificates above
+echo "generating a cert/key pair to test 'untrusted' behavior"
+openssl req -new -newkey rsa:2048 -x509 -nodes -out untrusted_cert.pem -keyout untrusted_key.pem -days 65536 -config config/ca.cnf

quic/s2n-quic-core/certs/key.pem

@@ -1,5 +1,5 @@
------BEGIN PRIVATE KEY-----
-MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgtZAp9paqkz1vzQSp
-tw52t+ZiSKAuJRfB5JnvA6q7+CKhRANCAAQbbVPayLOdbKxXB4yB4Vx3Kf2Z89vs
-UvhmiICsjncRwBEKkP+GjTg1bSEloLvzuha93u78xp2/1ZaeqtVwYgJM
------END PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgRlCQqSxQrvgT3BU7
+xHp9ymk5r0RY2jccZOom+64gEv6hRANCAARuubC1HZsSP+GK3mLtWSHXCXdSoDKR
+AU3zTURhkL3epSntdb04HRT2QyTkrrtBvvbf2gvrvyPC2Al0F6gMdroL
+-----END PRIVATE KEY-----

quic/s2n-quic-core/certs/key_pkcs1.pem

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpQIBAAKCAQEA6mOufxxreztVa/JdBkgADQoPpj5WDmfjnJEU4SOrvKQ3TPAX
-ITd1dLMSKRzxIYkUlOS9oNngzxTr7nbgFUtn08sgHfxl6KTbhQgqw9caPXWGtnaQ
-YgdNFxfaU03fAhREnnGjmzlpBUFMVZEfa5ETOOGPsLIRrOs8uzBIhk+8IksrNkuX
-izuRsQ9UThceDjLxO4wnDC+NRS5P+/rf0VOLfWNnxo+ZOlTsOEflvUkVwkiCQXE/
-9ELz3pLlH7vZwefBwv8RiVEVxUiNQUAIp1YudBF2Rfy7OMwL0DKWxpUo6SW3h5uA
-HPlf6UEDhfCFszG8R96E4oxe23ISIUWjRSabHQIDAQABAoIBAQCJckDeWy0QC6Aw
-9+PjDg+xlcfNhdpzAirwIgeran6H1Yh0PophuSLQdz3cDBO+xaLjGSu2Cm4RIUSl
-BuKquhg9k2zXCK49+YadAUgKpbXGeoevseFDCuMC+sLVfOGcV4RRoXP+T3EtWrhH
-qR1St7Uc8vCO/iztSNjJMCwnTtSVCn4Mr7j8Tqf8EMoDq9zx4mZaOpeUfcb23Hp7
-NpRkNRU5P1RCQFrw5gjp3SwUSzJfzgewovr2U2Je4naNPgE/VjQrSB7WBPDHJ0rO
-hiuKHq3e5T3DCL6SAzcwRHS0omB5TQFpt3H3yjmW3D1srUNcF1Ma8namhO8DM3B5
-0QORLzUhAoGBAPkmYBvqaOOpSZw2i/ZlR27hA4D/sM5IEBsfwHIZcjFvkbRB1lOe
-4OW3WhYYX/2pIHJpqyoZrkI6LYTzbTSHBhSD+Szqr+TJUWEbHjG+pXhrJSuZJNub
-Qo4JU5QfbLZ3EXosAyl3Bhh3wmTw+sGqCPmq2EarKquvW9IcQJCauGi5AoGBAPDV
-ak80MWvfTnfapZpQzVhli5ZoVPhWk38Fv2WvqeuZ16jjy9Q3kvLHvOXL6RiqGnue
-OqWzy+eafeSZ+ZdAmcBeFSqmGuhjjgSCQ765/kFU97ECvm4U/R3bk6h1YKydOJXo
-fStO7r8zDYWuulwyfp93c3AEKLqgE7G9S2FY+kuFAoGBAJ4N6TRsXUPndcoClIGn
-uEwvtJBWJGyILKd4WhZH7DhORclrZrK/fH5d9WlE50g8zVenjyzzA6gBzjSkVGfZ
-LFNBcYY8D3988wI+OMZn4gLlPbxNt6MU+ICwi/PQh5+tI0o0t4DLf/NvrcNpWDoZ
-Sv5PkkoqdbRaV06QG6lgbZIJAoGBAL1Znk8NoznEBcbYItH0a67vj9M+zme+chMx
-qq1BcuCpQVUpXQ3Kb//wKMWoD+nzfATrgALeHRhIcGj24rUX9oq3rf6tQISsGXHU
-FX10cMJfEquak6yrVeNOy4ZsWwj8SAwdEaSmV7H+ashLe3yXutSYLyvIKVmqGDHr
-ucOdGJWdAoGACpQMjbj44yWD8W3FE2cC6dwet2gkjWEuZPDcXrmUzAy90fyT+x07
-dMqansk4ThlHsfHld+znwJQ20CRCmXWrmVH4vIUNjJK6c+jrvaGYGcoW/bD3Xoeg
-qjjmXua7hGVx7wrPIwXfxEG1tJzrDRtEROnCiaeMmzNbVvkQkZTzzkQ=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 -----END RSA PRIVATE KEY-----

quic/s2n-quic-core/certs/untrusted_cert.pem

@@ -1,23 +1,23 @@
 -----BEGIN CERTIFICATE-----
-MIID4TCCAsmgAwIBAgIUeUVLuShRH33khiBcnBmKmsnsEwowDQYJKoZIhvcNAQEL
-BQAwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCldhc2hpbmd0b24xEDAOBgNVBAcM
-B1NlYXR0bGUxEjAQBgNVBAoMCUFtYXpvbiBHbzELMAkGA1UECwwCU1AxJTAjBgNV
-BAMMHGRhdGFwbGFuZS5lY2EuaWhtLmFtYXpvbi5jb20wHhcNMjIwMzIxMDY0NDQz
-WhcNMjQwNTI5MDY0NDQzWjBzMR8wHQYDVQQDDBZxbGF3cy5xbGF3cy5hbWF6b24u
-Y29tMQswCQYDVQQGEwJVUzETMBEGA1UECAwKV2FzaGluZ3RvbjEQMA4GA1UEBwwH
-U2VhdHRsZTEcMBoGA1UECgwTU3VwZXIgVW50cnVzdHdvcnRoeTCCASIwDQYJKoZI
-hvcNAQEBBQADggEPADCCAQoCggEBAMzq+Mz+eU7Q/R0Sr8k/IfL/MFVQtlvQDc6E
-3v/V56yJW65jo2XLVXea9lpgTZKDw4U92Tkss5YoKRA8mPYF0ufkpz3Nihw+5tyr
-pd6Y7hx+wPsnq7eo2/aCM98o5DvsgQHx8wjvPj3I4D/WprQa7RacglzCQAJjKDZk
-n9nAAxopUzaf/lHalAGXUpdvgH0w3xBjExm+afJYzLXLZRhCSsCQgxoUBijPK/p+
-sh6NtYncKcNQ7GzEaYLXrBJxVJig/OkLNqGXIXO5EVSrJJclMZjGx9hbCZbxSnwn
-hR+Pl5TlLM/9z4y7H4teoWigvFHiBdl2MEYuaTxYovJfOG7Dn5cCAwEAAaNkMGIw
-HwYDVR0jBBgwFoAUodDXcBNXZiT37rsnx3gy/nWEBFUwCQYDVR0TBAIwADALBgNV
-HQ8EBAMCBPAwJwYDVR0RBCAwHocEfwAAAYILcWxhd3MucWxhd3OCCWxvY2FsaG9z
-dDANBgkqhkiG9w0BAQsFAAOCAQEAVF8gGPN+0UxQdWT+V65x6zzcJQgmhIXiZEHT
-K8aV3TRZTRx6qrQnTRXLbdT+PDVeaBuckCkMVx38ZpIF+1Zlb9ZSqr4QuLVmKN9l
-yuYMMmOPF9ri9Vo9GoVqm5JTU2PIsRzQOzwlAuRQ1erRgUhmhc0scprtY1XkriRD
-+PdlM1IwA09va8WS+Fx8brms8kd9H28UqGOhPKqndXP01FVdhZf+IRbivssi7fIz
-Am7f+vNf2tx6eH3AJ3CpmgdAWT/WGycyU3/uMdl+2ZdVRyML/pjhsRpN2+qgU7JI
-ZNDyk4qKVLGONU5S44BTriJ5VP3z3DE7Wad25kquc95Y8Ro2Pw==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 -----END CERTIFICATE-----

quic/s2n-quic-core/certs/untrusted_key.pem

@@ -1,27 +1,28 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEAzOr4zP55TtD9HRKvyT8h8v8wVVC2W9ANzoTe/9XnrIlbrmOj
-ZctVd5r2WmBNkoPDhT3ZOSyzligpEDyY9gXS5+SnPc2KHD7m3Kul3pjuHH7A+yer
-t6jb9oIz3yjkO+yBAfHzCO8+PcjgP9amtBrtFpyCXMJAAmMoNmSf2cADGilTNp/+
-UdqUAZdSl2+AfTDfEGMTGb5p8ljMtctlGEJKwJCDGhQGKM8r+n6yHo21idwpw1Ds
-bMRpgtesEnFUmKD86Qs2oZchc7kRVKsklyUxmMbH2FsJlvFKfCeFH4+XlOUsz/3P
-jLsfi16haKC8UeIF2XYwRi5pPFii8l84bsOflwIDAQABAoIBAB6Z/HvIiN8fUJ1V
-3BCGsBA00cf73K/LWzR7HT5BeG6IuLtLP+yEuAe7iYynkw4NRVaRjO3/4fXLm45E
-LmeXKQ7eU6dkGXrsXdeYfpXGatCwkSswmnE781VVzl9GIQdd40oiErRD3hyl8e82
-pACDgOJ+ju1BSQPSQQAWeNSw2wW9363zbTYRp69WCb2qQfEyw6I7C/UCv3ydW1oU
-ec04H3XtHonK/mVyRiWQ63Q/EzpdDTvD6EdxreyuLLjmWA99vERgZYUY/Wf18Hyr
-CfUB/zFk70fg70xTbLkpXIokCSd129b86vfiq73JAWwg7qKECH7SJM82rtqVUXKR
-1WxA+9kCgYEA7aR2zZYWlTEBSvPCmToeli8Sn0LnIqn4usnb8pdjz6l48E700BQN
-UM/Qr4vvsDj+LrzLyEdppOggek6LtTAcdOkXPzAPBPc7q+Tk0UMOH9MhQ4C8M2zA
-yID8m9VDa533i+m1H8xrzks796ZAAwubiT0CYbn9KoZ24En5hzz2ZtUCgYEA3L9b
-kJYhBEF2HblH/9Z5gVPP/WXtoTpH2W/ZsAhxi2/oFgaxqQELG1WaE+ka6KLcybKo
-FgMJl7xFyunStkzSlysENn7VFB4G/02gOW6Cke6NkMWUV8r1ZCw8eHYYgO+n/Yao
-5MbifLzpX6BdQEKEc+eVy2zypi5iI4v7tB8xersCgYAYMmPKYRrhjADWseVBltJg
-dmCOCNDiDa5+zmjv1YxbK6VdypxQx4nnjZFxHm2EYvk2pxCUzvipytzrty2wgDqV
-iNpOG8WbutS/lunZiNtaUDQV3HjNP6iNgdy2vUtFHOuEuoIvv6/GbJCpkar45Gis
-26JvcvGdL93QzpdytrlcFQKBgQCBzcBA+Ba4Euoqtk2hIfPW2XrfTXV7LfMb58qA
-2aYy0P4PHaaQc32deCue856QF1xu+jAeqXCVme8MT4xJCEl4/KGAjfor1zBUJchG
-nTYIK9dwvs3pBf5gBicUypTEFKiayvk7dbuuj8NHKNxMshCCuzX5JbpVf8bTkjfT
-BdipiwKBgQCXLOzMMAQMtF+Oo/nCd4Dvmi+IApP/JJW56JoSRdumaghmXfWLz8m0
-al9lUpFcnQTyFNXQVuqjF/73zw06sNR3u95R0g74IWMiqwF92JmDlNLS+vqkJVAg
-rPaXD84foGtBtfiNkqrIgSuz12N+/lOXEZKxvz2MNt+9dZ0pKeQInw==
------END RSA PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

quic/s2n-quic-core/src/crypto/tls/testing.rs

@@ -39,8 +39,9 @@ pub mod certificates {
     }
 
     pem!(KEY_PEM, "key.pem");
-    pem!(KEY_PKCS1_PEM, "key_pkcs1.pem");
     pem!(CERT_PEM, "cert.pem");
+    pem!(KEY_PKCS1_PEM, "key_pkcs1.pem");
+    pem!(CERT_PKCS1_PEM, "cert_pkcs1.pem");
     der!(KEY_DER, "key.der");
     der!(CERT_DER, "cert.der");
     pem!(UNTRUSTED_CERT_PEM, "untrusted_cert.pem");

quic/s2n-quic-rustls/src/certificate.rs

@@ -171,6 +171,7 @@ mod tests {
     #[test]
     fn load_pem() {
         let _ = CERT_PEM.into_certificate().unwrap();
+        let _ = CERT_PKCS1_PEM.into_certificate().unwrap();
         // PKCS #8 encoded key
         let _ = KEY_PEM.into_private_key().unwrap();
         // PKCS #1 encoded key

quic/s2n-quic-rustls/src/lib.rs

@@ -75,4 +75,27 @@ mod tests {
 
         pair.finish();
     }
+
+    #[test]
+    fn client_server_pkcs1_test() {
+        let mut client = client::Builder::new()
+            .with_certificate(CERT_PKCS1_PEM)
+            .unwrap()
+            .build()
+            .unwrap();
+
+        let mut server = server::Builder::new()
+            .with_certificate(CERT_PKCS1_PEM, KEY_PKCS1_PEM)
+            .unwrap()
+            .build()
+            .unwrap();
+
+        let mut pair = tls::testing::Pair::new(&mut server, &mut client, "localhost".into());
+
+        while pair.is_handshaking() {
+            pair.poll(None).unwrap();
+        }
+
+        pair.finish();
+    }
 }