From 4fee71d64722d5b17ff4519b0006abe4e28d31f5 Mon Sep 17 00:00:00 2001
From: Peter Eckersley <pde@eff.org>
Date: Thu, 31 May 2012 15:23:19 -0700
Subject: [PATCH] A toy CA we can mess about with

---
 ca/demoCA/7f587c91.0        |  1 +
 ca/demoCA/README            |  3 ++
 ca/demoCA/ca-privkey.pem    | 18 +++++++++++
 ca/demoCA/cacert.pem        | 21 +++++++++++++
 ca/demoCA/examp.ly-cert.pem | 62 +++++++++++++++++++++++++++++++++++++
 ca/demoCA/examp.ly-key.pem  | 18 +++++++++++
 ca/demoCA/index.txt         |  0
 ca/demoCA/serial            |  1 +
 8 files changed, 124 insertions(+)
 create mode 120000 ca/demoCA/7f587c91.0
 create mode 100644 ca/demoCA/README
 create mode 100644 ca/demoCA/ca-privkey.pem
 create mode 100644 ca/demoCA/cacert.pem
 create mode 100644 ca/demoCA/examp.ly-cert.pem
 create mode 100644 ca/demoCA/examp.ly-key.pem
 create mode 100644 ca/demoCA/index.txt
 create mode 100644 ca/demoCA/serial

diff --git a/ca/demoCA/7f587c91.0 b/ca/demoCA/7f587c91.0
new file mode 120000
index 000000000..1310cfcff
--- /dev/null
+++ b/ca/demoCA/7f587c91.0
@@ -0,0 +1 @@
+cacert.pem
\ No newline at end of file
diff --git a/ca/demoCA/README b/ca/demoCA/README
new file mode 100644
index 000000000..50ad9f89d
--- /dev/null
+++ b/ca/demoCA/README
@@ -0,0 +1,3 @@
+Made with CA.sh from the openssl source.
+
+passphrase is "dang"
diff --git a/ca/demoCA/ca-privkey.pem b/ca/demoCA/ca-privkey.pem
new file mode 100644
index 000000000..916644ad6
--- /dev/null
+++ b/ca/demoCA/ca-privkey.pem
@@ -0,0 +1,18 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: DES-EDE3-CBC,73428722CE82FB30
+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+-----END RSA PRIVATE KEY-----
diff --git a/ca/demoCA/cacert.pem b/ca/demoCA/cacert.pem
new file mode 100644
index 000000000..4406daaf1
--- /dev/null
+++ b/ca/demoCA/cacert.pem
@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
diff --git a/ca/demoCA/examp.ly-cert.pem b/ca/demoCA/examp.ly-cert.pem
new file mode 100644
index 000000000..ad7748e71
--- /dev/null
+++ b/ca/demoCA/examp.ly-cert.pem
@@ -0,0 +1,62 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            bc:e5:b0:84:89:13:79:d6
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=US, ST=CA, L=San Francisco, O=Experimental Certificates, Inc, OU=Git Repository, CN=spurious.com
+        Validity
+            Not Before: Jul 21 19:25:32 2011 GMT
+            Not After : Jul 20 19:25:32 2012 GMT
+        Subject: C=LY, ST=Tarabulus, L=Tripoli, O=Internet Security Examples, CN=examp.ly
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (1024 bit)
+                Modulus (1024 bit):
+                    00:a7:60:50:48:54:59:8c:8a:3f:13:df:3e:b9:c3:
+                    ea:7a:97:9f:fa:66:f3:6e:d3:cc:6b:5e:e0:c6:e7:
+                    87:58:3f:3d:6d:2d:dc:7b:7d:fb:f1:48:48:bf:0c:
+                    30:d5:9c:59:2b:36:01:57:39:f4:1e:bc:d5:e3:4f:
+                    35:0b:4a:bc:24:77:44:67:f6:bb:0a:2e:27:55:b5:
+                    a4:94:ed:5e:85:ac:ed:31:95:97:f2:05:0e:48:84:
+                    b5:cd:69:13:7d:c0:02:05:2a:9f:ad:c6:28:b7:c2:
+                    0e:bf:84:63:4d:86:de:5a:f0:0e:a7:4d:23:6d:6c:
+                    e4:82:2c:e5:1c:8a:76:fd:a1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            Netscape Comment: 
+                OpenSSL Generated Certificate
+            X509v3 Subject Key Identifier: 
+                1A:2C:51:B5:B1:C9:69:8A:0C:E0:13:7F:44:4D:8F:E0:80:4D:BE:B4
+            X509v3 Authority Key Identifier: 
+                keyid:86:C0:E0:2D:CC:E0:A6:27:7E:7E:12:D0:6F:F7:0D:EC:56:92:06:0C
+
+    Signature Algorithm: sha1WithRSAEncryption
+        1a:d1:3b:5f:b7:29:98:35:62:f1:25:ba:84:f7:76:cc:c3:c8:
+        2e:32:8f:3e:ca:22:81:fd:17:ff:be:f2:fd:ae:05:94:20:ad:
+        f9:e4:97:ef:81:f2:f6:05:1a:4b:ab:7d:d5:69:ca:63:c0:91:
+        b5:09:a9:21:6d:e9:ab:10:24:bc:1e:7e:69:40:04:c7:03:7b:
+        a8:c1:d4:b9:70:7b:7f:d3:a3:03:d2:99:b4:3b:b2:9d:aa:43:
+        2b:b5:d8:df:47:26:58:ce:60:e5:12:5f:6c:01:01:84:a9:5c:
+        60:74:2b:cb:6c:02:7b:05:d0:28:f8:f4:26:2f:5e:47:9d:cd:
+        69:3c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/ca/demoCA/examp.ly-key.pem b/ca/demoCA/examp.ly-key.pem
new file mode 100644
index 000000000..8cbd2db74
--- /dev/null
+++ b/ca/demoCA/examp.ly-key.pem
@@ -0,0 +1,18 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: DES-EDE3-CBC,069A43447F1D56CF
+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+-----END RSA PRIVATE KEY-----
diff --git a/ca/demoCA/index.txt b/ca/demoCA/index.txt
new file mode 100644
index 000000000..e69de29bb
diff --git a/ca/demoCA/serial b/ca/demoCA/serial
new file mode 100644
index 000000000..2922c92d8
--- /dev/null
+++ b/ca/demoCA/serial
@@ -0,0 +1 @@
+BCE5B084891379D6