redhat-qe-security / keyfile-corpus

Collection of certificates and keys with different encodings and encryptions

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Please add scripts / command lines to (re-)generate the data files

rockdaboot opened this issue · comments

For review, reproducing, testing, generating more/different files without looking up the syntax of each tool.

while it is possible to generate some of them with specific versions of openssl compiled with specific options, multiple require actually editing source code to create

IOW: creating a tool that is able to generate all of those files automatically is a big project in itself, unfortunately, not one I have the time to work on

NP. Then it's ok if these files can't be processed (=parsing errors out) by e.g. GnuTLS since they don't appear in normal procedures. They are still good for testing parser behavior in regards of crashes, though. Do I understand this correctly ?

I'm talking about OpenSSL specifically as that's the tool I used to generate them, but those files are well-formed in general (maybe with exception of the ones that use unicode passwords as that is underspecified).

Thanks for clarifying

Also the files with malformed in the name don't need to be readable by an implementation other than the one that created them (like NSS), they are provided as the implementation have been fixed not to create files like this any more, they still need to be able to read them (for obvious reasons).